Linux Kernel Memory Leak Vulnerability in AMD Display Driver

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's AMD display driver, specifically within the 'dc_construct_ctx()' function. This issue arises because the function fails to properly release allocated memory under certain conditions, leading to a gradual increase in memory usage that can impact system performance.

Impact

Exploitation of this vulnerability can cause a memory leak, where the system's memory resources are not properly released, potentially leading to degraded performance or exhaustion of available memory.

Reproduction

The vulnerability can be reproduced by invoking the 'dc_construct_ctx()' function in the AMD display driver context. When the function allocates a performance trace but encounters an error, it fails to free the previously allocated context, causing a memory leak. This scenario can be triggered by simulating a failure in the 'dc_perf_trace_create()' function, which would result in the context not being properly cleaned up.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is available in the Linux kernel stable tree.

Added: Oct 4, 2025, 4:35 PM
Updated: Oct 4, 2025, 4:35 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.7
remediation
7.7
relevance
0.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.