Linux Kernel Airspy Driver Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's Airspy USB driver. This issue arises because a variable, 'buf', was moved from the stack to the heap in a previous commit. While the variable is properly freed in the error handling code, it is not deallocated in the successful execution path. The vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Remediation

Users can apply the patch available in the Linux kernel stable tree to address this vulnerability. The patched version can be downloaded from the Linux kernel Git repository.

Added: Sep 15, 2025, 6:29 PM
Updated: Sep 15, 2025, 6:29 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
7.7
relevance
0.5
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.