Linux Kernel SELinux Memory Leak Vulnerability in Security Read State Kernel Function

A memory leak vulnerability has been identified in the Linux kernel's SELinux implementation, specifically within the security_read_state_kernel() function. The issue arises because the function returns the result of __security_read_policy without releasing the memory allocated for the data, leading to a memory leak. The vulnerability has been addressed by ensuring that the memory is freed if __security_read_policy fails.

Impact

Exploitation of this vulnerability leads to a memory leak, causing increased memory usage and potential degradation of system performance over time.