Linux Kernel USB DWC3 Memory Leak Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's USB DWC3 driver. When the function 'debugfs_lookup()' is called, the returned result must be released with 'dput()' to prevent a memory leak. The vulnerability arises because this requirement was not met, leading to a gradual accumulation of unreleased memory. The issue has been addressed by modifying the code to use 'debugfs_lookup_and_remove()', which automatically handles the necessary memory management. Additionally, the root directory entry for the debugfs directory of the device must be stored to avoid repeated lookups, necessitating some code refactoring.

Impact

The vulnerability could lead to a memory leak, where memory is not properly released, potentially causing increased memory usage over time.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.