Linux Kernel IIO ADC ADI-AXI-ADC Refcount Leak Vulnerability

Vulnerability

A refcount leak vulnerability has been identified in the Linux kernel's IIO ADC ADI-AXI-ADC component. The issue arises in the 'adi_axi_adc_attach_clientof_parse_phandle()' function, which returns a node pointer with an incremented reference count. The vulnerability occurs because the function does not properly decrement the reference count when the node pointer is no longer needed, leading to a memory leak.

Impact

The vulnerability causes a memory leak by failing to properly manage reference counts, which can lead to increased memory usage and potential exhaustion of system resources.

Remediation

The vulnerability has been addressed by adding the missing 'of_node_put()' function call to properly manage the reference count and prevent the leak.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.