5.5
CVE-2021-46937
- EPSS 0.02%
 - Published 27.02.2024 10:15:08
 - Last modified 21.11.2024 06:34:58
 - Source 416baaa9-dc9f-4396-8d5f-8c081f
 - CVE-Watchlists
 - Open
 
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'
DAMON debugfs interface increases the reference counts of 'struct pid's
for targets from the 'target_ids' file write callback
('dbgfs_target_ids_write()'), but decreases the counts only in DAMON
monitoring termination callback ('dbgfs_before_terminate()').
Therefore, when 'target_ids' file is repeatedly written without DAMON
monitoring start/termination, the reference count is not decreased and
therefore memory for the 'struct pid' cannot be freed.  This commit
fixes this issue by decreasing the reference counts when 'target_ids' is
written.Data is provided by the National Vulnerability Database (NVD)
	Linux ≫ Linux Kernel  Version >= 5.15.0 < 5.15.13
| Type | Source | Score | Percentile | 
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.02 | 
| Source | Base Score | Exploit Score | Impact Score | Vector string | 
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 | 
                 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N  
             | 
        
CWE-668 Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.