Linux Kernel JFFS2 Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's JFFS2 file system component. This issue arises in the 'jffs2_scan_medium' function when an error is returned from 'jffs2_scan_eraseblock' and some memory has been added to the JFFS2 summary structure. The memory leak can be observed through a Kmemleak report, which indicates unreferenced objects that were not properly freed. The vulnerability has been addressed by modifying the JFFS2 code to reset the collected summary data on exit, preventing the memory leak.

Impact

Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.