Linux Kernel s390/zcrypt Memory Leak Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's s390/zcrypt component. When the function dev_set_name() fails, the zcdn_create() function does not release the newly allocated resources, leading to a memory leak. This issue affects several versions of the Linux kernel.

Impact

The vulnerability can lead to a memory leak, causing increased memory usage and potentially leading to exhaustion of system resources.

Reproduction

The vulnerability can be reproduced by creating a zcrypt device node and simulating a failure in the dev_set_name() function. This will cause the zcdn_create() function to exit without freeing the allocated resources, leading to a memory leak.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.