Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of universal planes in the Direct Rendering Manager (DRM) can lead to a resource leak. The issue arises in the __drm_universal_plane_init() function, where a range check for the format_count parameter is currently positioned after the resource allocation. This oversight can cause the format_types array to be leaked and fail to properly unregister the mode object, resulting in a leak of the modeset identifier. By moving the range check to the beginning of the function, the vulnerability can be mitigated before allocating resources.
The vulnerability causes a resource leak by failing to properly unregister mode objects, which can lead to unintended consequences in resource management and object lifecycle handling within the graphics subsystem.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.