Linux Kernel Remoteproc K3-R5 Refcount Leak Vulnerability

Vulnerability

A refcount leak vulnerability has been identified in the Linux kernel's remoteproc component, specifically within the K3-R5 processor cluster initialization. The issue arises because the 'for_each_available_child_of_node()' function decreases the reference count of the previous node with each iteration. When the loop is exited early, the reference count of the child node is not properly restored, leading to a memory management flaw. This vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability causes a refcount leak, which can lead to memory management issues such as use-after-free conditions or memory corruption.

Added: Jun 18, 2025, 4:34 PM
Updated: Jun 18, 2025, 4:34 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.