Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's ext4 file system component. The issue arises in the 'parse_apply_sb_mount_options()' function, where memory allocated for processing on-disk mount options can be leaked if the option processing fails. This vulnerability affects several Linux kernel versions.
Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance.
The vulnerability can be reproduced by creating an ext4 file system on a specified device, applying certain mount options that introduce a quota system, and then mounting the file system. After mounting, the kernel's memory leak debug feature can be used to scan for unreferenced memory allocations, which will reveal the memory leak caused by the vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.