Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's IAVF (Intel Ethernet Adaptive Virtual Function) driver has been addressed. The issue arose because the driver did not properly manage DMA (Direct Memory Access) allocations for the virtual function mailbox when errors occurred during the configuration of the Admin Send Queue (ASQ) and Admin Receive Queue (ARQ) registers. This oversight could lead to pending DMA allocations being released from the device while still in use, causing a memory leak. The vulnerability has been resolved by improving the error handling process, ensuring that DMA regions are properly freed in case of allocation errors.
The vulnerability could cause a memory leak by failing to release DMA allocations from the device, potentially leading to increased memory usage and degradation of system performance.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.