memory is leaked when tasks are moved to net_prio
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Bionic |
Fix Released
|
Medium
|
Thadeu Lima de Souza Cascardo | ||
Focal |
Fix Released
|
Medium
|
Thadeu Lima de Souza Cascardo |
Bug Description
[Impact]
In some container scenarios, there will be a memory leak, leading to OOM.
[Test case]
Run the following:
while true ; do mkdir net_prio/a unified/a ; bash -c 'echo $$ > unified/
Or the attached program cgroup_leak.c, which is faster. A leak would be produced without the fix, while there should be no constant leak with the fix applied.
[Potential regression]
This patch has also caused breakage with BPF cgroup in the past, when racing with its disabling, when one attachs a process to netprio cgroup. Similar breakage could happen.
-------
When net_prio is used without setting ifpriomap and BFP cgroup is used, memory may be leaked. This was fixed by upstream commit 090e28b229af92d
When a real fix for this cgroup BFP crash lands, this patch should be reinstated.
Cascardo.
CVE References
Changed in linux (Ubuntu Bionic): | |
status: | New → Confirmed |
importance: | Undecided → Medium |
Changed in linux (Ubuntu): | |
status: | New → Invalid |
Changed in linux (Ubuntu Focal): | |
status: | New → Confirmed |
assignee: | nobody → Thadeu Lima de Souza Cascardo (cascardo) |
Changed in linux (Ubuntu Bionic): | |
assignee: | nobody → Thadeu Lima de Souza Cascardo (cascardo) |
Changed in linux (Ubuntu Focal): | |
importance: | Undecided → Medium |
Changed in linux (Ubuntu Bionic): | |
status: | Confirmed → In Progress |
Changed in linux (Ubuntu Focal): | |
status: | Confirmed → In Progress |
Changed in linux (Ubuntu Bionic): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu Focal): | |
status: | In Progress → Fix Committed |
This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification- needed- focal' to 'verification- done-focal' . If the problem still exists, change the tag 'verification- needed- focal' to 'verification- failed- focal'.
If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.
See https:/ /wiki.ubuntu. com/Testing/ EnableProposed for documentation how to enable and use -proposed. Thank you!