Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's handling of the kexec system call on x86_64 architectures. When the kdump kernel is reloaded or unloaded, a buffer allocated for ELF headers is not properly freed, leading to a memory leak. This issue was detected by the kmemleak memory leak detector, which reported an unreferenced object corresponding to the leaked buffer. The vulnerability arises because the ELF header buffer is incorrectly managed during the kexec file load process, causing memory to remain allocated and unreferenced.
Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.
The vulnerability has been addressed in the official Linux kernel repository. Users should upgrade to the latest version of the Linux kernel where this issue has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.