Linux Kernel Memory Leak Vulnerability in x86 Kexec Handling

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's handling of the kexec system call on x86_64 architectures. When the kdump kernel is reloaded or unloaded, a buffer allocated for ELF headers is not properly freed, leading to a memory leak. This issue was detected by the kmemleak memory leak detector, which reported an unreferenced object corresponding to the leaked buffer. The vulnerability arises because the ELF header buffer is incorrectly managed during the kexec file load process, causing memory to remain allocated and unreferenced.

Impact

Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Remediation

The vulnerability has been addressed in the official Linux kernel repository. Users should upgrade to the latest version of the Linux kernel where this issue has been fixed.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.