Linux Kernel BPF Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's BPF (Berkeley Packet Filter) implementation. The issue arises in the function '__check_func_call', where the state of the function call is not properly managed in abnormal scenarios, leading to unreferenced allocated memory. This memory leak was detected by kmemleak, which reported an unreferenced object of size 2048 bytes. The vulnerability occurs in the BPF program loading process, specifically when function calls are checked and managed.

Impact

Exploitation of this vulnerability leads to memory leaks, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Remediation

Users can apply the latest patches available in the Linux kernel's official repository to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.5
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.