Linux Kernel Memory Leak Vulnerability in String Resource Management

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's handling of string arrays in device resource management. The issue arises in certain drivers that utilize the 'evm_kasprintf_strarray' function, leading to allocated string arrays not being properly released when a device is removed. This vulnerability has been addressed by ensuring that the allocated string arrays are added to the device's resource list, allowing for their automatic release when the device is no longer present.

Impact

The vulnerability causes a memory leak in drivers that use the affected string array management function, potentially leading to increased memory usage and degradation of system performance over time.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.