Linux Kernel MIPS VPE-MT Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel MIPS VPE-MT module. This issue arises because, after a certain commit, the device name is dynamically allocated and not properly freed when the module is unloaded. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can lead to a memory leak, where allocated memory is not released, potentially causing increased memory usage and degradation of system performance over time.

Reproduction

The vulnerability can be reproduced by loading the VPE-MT module, which dynamically allocates memory for the device name. When the module is unloaded, the memory is not properly freed, leading to a memory leak.

Remediation

The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version of the kernel where this issue has been fixed.

Added: Oct 1, 2025, 3:05 PM
Updated: Oct 1, 2025, 3:05 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.