Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A reference count leak vulnerability has been identified in the Linux kernel's RDMA/erdma component. This issue arises in the 'erdma_mmap' function, where the 'rdma_user_mmap_entry_get()' function is called to take a reference, but the reference is not properly released when no longer needed. The missing 'rdma_user_mmap_entry_put()' call in the error handling path has been added to address this leak. This vulnerability affects the Linux kernel stable tree.
Exploitation of this vulnerability can lead to a reference count leak, which may cause memory management issues such as use-after-free vulnerabilities or memory corruption.
Users can upgrade to the latest version of the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.