Linux Kernel DM Integrity Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's DM integrity module. The issue arises because the initialization function 'dm_integrity_init()'' fails to properly release allocated memory when an error occurs during the registration of the integrity target. This oversight can lead to a memory leak of the 'journal_io_cache' if 'dm_register_target()' fails. The vulnerability affects the Linux kernel DM integrity component.

Impact

The vulnerability can cause a memory leak in the DM integrity module, potentially leading to increased memory usage and degradation of system performance over time.

Reproduction

The vulnerability can be reproduced by loading the DM integrity module and causing the 'dm_register_target()' function to fail. This can be done by simulating a failure during the registration process, which will trigger the error handling path that leads to the memory leak.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.

Added: Oct 4, 2025, 4:37 PM
Updated: Oct 4, 2025, 4:37 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
0.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.