Linux Kernel RDMA/hns Reference Count Leak Vulnerability

A reference count leak vulnerability has been identified in the Linux kernel's RDMA/hns component. This issue arises in the 'hns_roce_mmap' function, where the 'rdma_user_mmap_entry_get_pgoff' function acquires a reference that is not properly released. The vulnerability affects the stable versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a reference count leak, which may cause memory management issues such as use-after-free vulnerabilities or memory leaks.

Reproduction

The vulnerability can be reproduced by invoking the 'hns_roce_mmap' function within the RDMA/hns component of the Linux kernel. The 'rdma_user_mmap_entry_get_pgoff' function will be called, creating a reference that is not released, causing a reference count leak.

Remediation

Users can apply the patch available in the Linux kernel stable tree to address this vulnerability. The patch is included in the commit '8abd2ff2256a2a99c11c7ecdcb5512429933620f', which is part of the Linux kernel stable release.