Linux Kernel netdevsim Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's netdevsim component. The issue arises in the 'nsim_dev_trap_fa_cookie_write' function, where a cookie allocated with 'kmalloc' is not properly freed when the device is removed. This oversight leads to an unreferenced object remaining in memory, causing a leak. The problem can be observed when the 'fa_cookie' is written, and the corresponding cleanup is not performed during the device removal process.

Impact

Exploitation of this vulnerability leads to a memory leak, where allocated memory is not released, potentially causing increased memory usage and degradation of system performance over time.

Remediation

The vulnerability has been addressed by adding a memory deallocation step to the device removal process, ensuring that the allocated cookie is properly freed. Users should apply the latest patches available in the Linux kernel to mitigate this issue.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.