Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's AMD display driver, specifically within the 'dc_construct_ctx()' function. This issue arises because the function fails to properly release allocated memory under certain conditions, leading to a gradual increase in memory usage that can impact system performance.
Exploitation of this vulnerability can cause a memory leak, where the system's memory resources are not properly released, potentially leading to degraded performance or exhaustion of available memory.
The vulnerability can be reproduced by invoking the 'dc_construct_ctx()' function in the AMD display driver context. When the function allocates a performance trace but encounters an error, it fails to free the previously allocated context, causing a memory leak. This scenario can be triggered by simulating a failure in the 'dc_perf_trace_create()' function, which would result in the context not being properly cleaned up.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is available in the Linux kernel stable tree.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.