In the Linux kernel, the following vulnerability has been resolved:
io_uring/zcrx: fix sgtable leak on mapping failures
In an unlikely case when io_populate_area_dma() fails, which could only
happen on a PAGE_POOL_32BIT_ARCH_WITH_64BIT_DMA machine,
io_zcrx_map_area() will have an initialised and not freed table. It was
supposed to be cleaned up in the error path, but !is_mapped prevents
that.
A memory leak vulnerability exists in Linux kernel's io_uring/zcrx module where scatter-gather tables fail to be freed when io_populate_area_dma() encounters errors on specific 32-bit architectures with 64-bit DMA support. The vulnerability could lead to kernel memory exhaustion if triggered repeatedly.
تحتوي نواة Linux على ثغرة تسرب ذاكرة في وحدة io_uring/zcrx حيث لا يتم تحرير جداول scatter-gather المهيأة عند فشل io_populate_area_dma(). تحدث هذه المشكلة فقط على أجهزة معمارية 32-bit مع دعم DMA 64-bit، وقد تؤدي إلى استنزاف ذاكرة النواة.
A memory leak in Linux kernel io_uring/zcrx module fails to properly free scatter-gather tables during DMA mapping failures on 32-bit architectures with 64-bit DMA. Repeated exploitation could exhaust kernel memory resources.
Update Linux kernel to patched version that properly frees scatter-gather tables in io_zcrx_map_area() error path by removing the !is_mapped condition preventing cleanup. Apply security patches from your Linux distribution vendor immediately.
قم بتحديث نواة Linux إلى الإصدار المصحح الذي يحرر جداول scatter-gather بشكل صحيح في مسار الخطأ. طبق تحديثات الأمان من موفر توزيعة Linux الخاص بك فوراً.