Linux Kernel Name Leak Vulnerability in OCXL File Register AFU Function

A name leak vulnerability has been identified in the Linux kernel's OCXL file registration process for Accelerator Function Units (AFUs). This issue arises when the 'device_register()' function returns an error, as the name set by 'dev_set_name()' is not properly freed. The vulnerability exists in the 'ocxl_file_register_afu()' function within the OCXL driver. The problem can be exploited by causing 'device_register()' to fail, leading to a memory leak of the allocated name.

Impact

The vulnerability can lead to a memory leak, where allocated names are not properly freed, potentially causing resource exhaustion over time.

Reproduction

To reproduce this vulnerability, register an AFU using the 'ocxl_file_register_afu()' function and simulate an error response from the 'device_register()' function. This will cause the allocated name to leak, as it will not be freed properly, creating a name leak issue.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.