Linux Kernel OCXL Driver PCI Device Reference Count Leak Vulnerability

A vulnerability exists in the Linux kernel OCXL driver, specifically related to improper management of PCI device reference counts. The issue arises in the 'get_function_0()' function, which retrieves a PCI device but fails to release the reference correctly, leading to a memory leak. This vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can cause a reference count leak, potentially leading to memory management issues.

Reproduction

The vulnerability can be reproduced by calling 'get_function_0()' without properly managing the PCI device reference count. This can be done by not calling 'pci_dev_put()' after 'pci_get_domain_bus_and_slot()', which increments the reference count. The issue can also be reproduced by not handling the reference count correctly in the error path of the function.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.