Linux Kernel Aspeed SoC Information Driver Memory Leak Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's Aspeed SoC information driver. The issue arises because the error handling process does not properly free allocated memory, specifically for certain string attributes. This vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Reproduction

The vulnerability can be reproduced by loading the Aspeed SoC information driver, which allocates memory for various attributes. If the driver encounters an error during initialization, it fails to free all allocated memory, particularly the machine attribute, leading to a memory leak.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.