Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability has been identified in the Linux kernel's DRM MSM A6XX graphics driver, specifically related to memory management. The issue arises in the 'adreno_show_object()' function, which reallocates the pointer it receives on the first call when the data is ASCII85 encoded, using 'kvmalloc' and 'kvfree()'. This behavior requires that the data passed to the function be allocated with 'kvmalloc', prohibiting the use of the 'state_kcalloc()' helper. The vulnerability was introduced by a previous commit that replaced 'kcalloc()' with 'kvzalloc()', without properly addressing the memory deallocation, leading to a memory leak. The issue has been acknowledged and a patch has been applied to restore the correct memory management practices.
The vulnerability could lead to improper memory handling, causing memory leaks or potentially allowing for memory corruption.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.