Linux Kernel Refcount Leak Vulnerability in Alpine MSIX IRQ Chip Handling

Vulnerability

A refcount leak vulnerability has been identified in the Linux kernel's handling of the Alpine MSIX interrupt controller. The issue arises in the 'alpine_msix_init_domains' function, where the 'of_irq_find_parent' call returns a node pointer with an incremented reference count. If this pointer is not properly released using 'of_node_put', it creates a refcount leak. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability leads to a refcount leak, which can cause memory management issues, potentially allowing for memory exhaustion or other related problems.

Reproduction

The vulnerability can be reproduced by initializing the Alpine MSIX interrupt controller in the Linux kernel. The 'alpine_msix_init_domains' function will be called, which improperly handles the reference count of the GIC node, leading to a refcount leak.

Remediation

The vulnerability has been addressed in the Linux kernel by adding the missing 'of_node_put' call to properly manage the reference count and prevent the leak. Users should upgrade to the latest version of the Linux kernel where this fix has been applied.

Added: Sep 15, 2025, 2:44 PM
Updated: Sep 15, 2025, 8:41 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
7.7
relevance
0.5
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.