Linux Kernel Memory Leak Vulnerability in ext4 File System

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's ext4 file system component. The issue arises in the 'parse_apply_sb_mount_options()' function, where memory allocated for processing on-disk mount options can be leaked if the option processing fails. This vulnerability affects several Linux kernel versions.

Impact

Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance.

Reproduction

The vulnerability can be reproduced by creating an ext4 file system on a specified device, applying certain mount options that introduce a quota system, and then mounting the file system. After mounting, the kernel's memory leak debug feature can be used to scan for unreferenced memory allocations, which will reveal the memory leak caused by the vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.