Linux Kernel Memory Leak Vulnerability in Capabilities Handling

A memory leak vulnerability has been identified in the Linux kernel's capabilities management, specifically within the 'cap_inode_getsecurity()' function. The issue arises when 'vfs_getxattr_alloc()' is used to allocate memory for an attribute buffer. If the memory allocation is successful but the corresponding handler function fails to execute properly, the allocated memory is not freed, leading to a leak. This vulnerability has been addressed by modifying the error handling to ensure that the allocated memory is properly released in such scenarios.

Impact

Exploitation of this vulnerability could lead to a memory leak, where allocated memory is not properly freed, potentially causing increased memory usage and degradation of system performance over time.