Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's CAN (Controller Area Network) error message handling. The issue arises in the function 'es58x_rx_err_msg()', where a failure in 'can->do_set_mode()' causes the function to return prematurely, leaving a socket buffer (skb) allocated by 'alloc_can_err_skb()' unfreed. This behavior creates a memory leak. The vulnerability has been addressed by modifying the function to remove the early return in the error handling path, allowing for proper cleanup of the allocated skb.
Exploitation of this vulnerability leads to a memory leak, causing increased memory usage that is not released back to the system.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.