Memory leak in Linux kernel - CVE-2021-47545

Vulnerability identifier: #VU89930

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-47545

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the fmt_free(), perf_hpp__init() and perf_hpp_list__prepend_sort_field() functions in tools/perf/ui/hist.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
openEuler
kernel
python2-perf
kernel-tools-debuginfo
python2-perf-debuginfo
kernel-tools
kernel-devel
bpftool
kernel-source
python3-perf
kernel-debugsource
bpftool-debuginfo
kernel-tools-devel
perf-debuginfo
perf
kernel-debuginfo
python3-perf-debuginfo

Install update from vendor's website.

Linux kernel - addressed in versions 4.14.257, 4.19.220, 5.4.164, 5.10.84, 5.15.7, 5.16
kernel - update to 4.19.90-2406.1.0.0279
python2-perf - update to 4.19.90-2406.1.0.0279
kernel-tools-debuginfo - update to 4.19.90-2406.1.0.0279
python2-perf-debuginfo - update to 4.19.90-2406.1.0.0279
kernel-tools - update to 4.19.90-2406.1.0.0279
kernel-devel - update to 4.19.90-2406.1.0.0279
bpftool - update to 4.19.90-2406.1.0.0279
kernel-source - update to 4.19.90-2406.1.0.0279
python3-perf - update to 4.19.90-2406.1.0.0279
kernel-debugsource - update to 4.19.90-2406.1.0.0279
bpftool-debuginfo - update to 4.19.90-2406.1.0.0279
kernel-tools-devel - update to 4.19.90-2406.1.0.0279
perf-debuginfo - update to 4.19.90-2406.1.0.0279
perf - update to 4.19.90-2406.1.0.0279
kernel-debuginfo - update to 4.19.90-2406.1.0.0279
python3-perf-debuginfo - update to 4.19.90-2406.1.0.0279

• https://git.kernel.org/stable/c/c5c8a26c0dc69a400553245e92d741fe55f91095
• https://git.kernel.org/stable/c/24a139c105fa0f7f99888cf328bf6a02fc841675
• https://git.kernel.org/stable/c/b380d09e44e8479e71e3ae8446b515a5b3166244
• https://git.kernel.org/stable/c/a4c17ebdd6249cb4e061358d3693383f6628e069
• https://git.kernel.org/stable/c/5b5c6f57a1f81499db4c8ea597898cb1b87de0b6
• https://git.kernel.org/stable/c/0ca1f534a776cc7d42f2c33da4732b74ec2790cd
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.257
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.220
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.84
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.7
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.164

• Memory leak in Linux kernel perf ui
• openEuler 20.03 LTS SP4 update for kernel