Linux Kernel VFIO PCI Memory Leak Vulnerability During Power State Transitions

A memory leak vulnerability has been identified in the Linux kernel's VFIO PCI implementation. This issue arises when the PCI device's power management state is transitioned from D0 to D3hot and back to D0. During this process, the VFIO driver saves the PCI state to a local variable but fails to free the allocated memory under certain conditions, leading to a memory leak. This vulnerability can be exploited by looping the state transitions, causing an out-of-memory situation.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the system to run out of memory.