Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's ARM: OMAP2+ architecture, specifically within the real-time counter initialization function. The issue arises because the 'sys_clk' resource, allocated by the 'clk_get()' function, is not properly released before the function returns. This oversight can lead to resource management problems over time.
The vulnerability causes a memory leak, where allocated resources are not released, potentially leading to increased memory usage and degradation of system performance.
The vulnerability can be reproduced by calling the 'realtime_counter_init()' function in the ARM: OMAP2+ context. This function will allocate a clock resource with 'clk_get()' but fail to release it, causing a memory leak. The issue can be observed by monitoring memory usage before and after the function call, which will show an increase in allocated memory that is not freed.
The vulnerability has been addressed in the Linux kernel stable tree. Users can upgrade to the latest version of the stable kernel to apply the fix.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.