Linux Kernel CMDQ Memory Leak Vulnerability in hinic Driver

A memory leak vulnerability has been identified in the Linux kernel's hinic network driver. When the function hinic_set_cmdq_depth() fails during the initialization of command queues, the allocated CMDQ memory is not properly released. This issue affects the stable versions of the Linux kernel.

Impact

The vulnerability leads to memory leaks, which can cause increased memory usage and potentially degrade system performance over time.

Reproduction

The vulnerability can be reproduced by invoking the hinic_init_cmdqs() function with a scenario that causes hinic_set_cmdq_depth() to fail. This will result in the CMDQ memory not being freed, creating a memory leak.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.