Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A refcount leak vulnerability has been identified in the Linux kernel's remoteproc component, specifically within the K3-R5 processor cluster initialization. The issue arises because the 'for_each_available_child_of_node()' function decreases the reference count of the previous node with each iteration. When the loop is exited early, the reference count of the child node is not properly restored, leading to a memory management flaw. This vulnerability affects several versions of the Linux kernel.
The vulnerability causes a refcount leak, which can lead to memory management issues such as use-after-free conditions or memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.