Linux Kernel Memory Leak Vulnerability in Blktrace via Debugfs Lookup

A memory leak vulnerability has been addressed in the Linux kernel's blktrace component. The issue arose because the debugfs_lookup() function was not properly releasing memory, leading to a gradual memory leak. The vulnerability affects the stable versions of the Linux kernel. The recommended solution is to use debugfs_lookup_and_remove(), which automatically manages the memory correctly.

Impact

The vulnerability could lead to a memory leak, causing increased memory usage over time.

Reproduction

The vulnerability can be reproduced by calling debugfs_lookup() in the blktrace component without subsequently calling dput() to release the memory. This omission will result in a memory leak that accumulates over time.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.