tracing: Fix resource leak on mmiotrace trace_pipe close (Linux Linux)

CVE-2026-68175
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.21 % · centile 11 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Received

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace trace_pipe close The mmiotrace tracer was added May 12th 2008. At that time, resources created in pipe_open() could not be freed because there was not pipe_close function pointer of the tracer. The pipe_close function pointer was added in December 7th, 2009, but the mmiotrace tracer was not updated. mmio_pipe_open() allocates a header_iter and takes a pci_dev reference when trace_pipe is opened. mmio_close() frees them, but it was only wired to the tracer's .close callback. tracing_release_pipe() invokes .pipe_close, not .close, when the trace_pipe file is released. As a result, closing trace_pipe with the mmiotrace tracer active leaked the header_iter allocation and left a stale pci_dev reference. Set .pipe_close to mmio_close, matching how function_graph wires both callbacks to the same handler. Note, if the trace_pipe is read to completion, it will clean up the resources, but if one were to run: # head -n 1 /sys/kernel/tracing/trace_pipe VERSION 20070824 Over and over again, it would trigger a massive leak.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected c521efd1700a8c0f7ce26f011f5eaecca17fabfa < 7871128ea41217fa6a58bbbcb44cb0d2e9e60966 ; affected c521efd1700a8c0f7ce26f011f5eaecca17fabfa < 1d0b59e2b203c02149d8f63607329debe36b3ec5 ; affected c521efd1700a8c0f7ce26f011f5eaecca17fabfa < 581ac13e12e77d6c64f8719083bdf95209308919 ; affected c521efd1700a8c0f7ce26f011f5eaecca17fabfa < f9e6dfe341fb31c95b9655eb6b1db8b3ae090817 ; affected c521efd1700a8c0f7ce26f011f5eaecca17fabfa < 594e1cf3f736779a535873fd5988162d827bfe4f ; affected c521efd1700a8c0f7ce26f011f5eaecca17fabfa < cf5a82bef623b969a609f2b7e392d06dbae34aa6
Linux · Linuxaffected 2.6.33 ; unaffected 0 < 2.6.33 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.148 ≤ 6.6.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD