Linux Kernel ARM: OMAP2+ Memory Leak Vulnerability in Real-Time Counter Initialization

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's ARM: OMAP2+ architecture, specifically within the real-time counter initialization function. The issue arises because the 'sys_clk' resource, allocated by the 'clk_get()' function, is not properly released before the function returns. This oversight can lead to resource management problems over time.

Impact

The vulnerability causes a memory leak, where allocated resources are not released, potentially leading to increased memory usage and degradation of system performance.

Reproduction

The vulnerability can be reproduced by calling the 'realtime_counter_init()' function in the ARM: OMAP2+ context. This function will allocate a clock resource with 'clk_get()' but fail to release it, causing a memory leak. The issue can be observed by monitoring memory usage before and after the function call, which will show an increase in allocated memory that is not freed.

Remediation

The vulnerability has been addressed in the Linux kernel stable tree. Users can upgrade to the latest version of the stable kernel to apply the fix.

Added: Dec 30, 2025, 4:54 PM
Updated: Dec 30, 2025, 4:54 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
1.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.