Linux Kernel UBIFS Memory Leak Vulnerability in Znode Handling

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's UBIFS (Unsorted Block Image File System) component, specifically in the management of znodes. This issue arises when a znode is copied up during the 'dirty_cow_znode' process. If an error occurs while inserting the znode's old index, the copied znode is left unreferenced, leading to a memory leak. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Reproduction

The vulnerability can be reproduced by invoking the 'dirty_cow_znode' function in UBIFS with a znode that, when copied up, triggers an error during the index insertion process. This error can be simulated, causing the function to exit without freeing the copied znode, which then leads to the memory leak.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for upgrading the Linux kernel can be found in the official Linux documentation.

Added: Sep 15, 2025, 5:35 PM
Updated: Sep 15, 2025, 5:35 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.7
remediation
7.7
relevance
0.5
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.