Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's ext4 file system, specifically within the functions responsible for managing casefolded filenames. When the casefolding process fails, memory allocated for the fscrypt_name structure is not properly released, leading to a leak from the 'crypto_buf.name' member. This issue affects the ext4_fname_setup_filename and ext4_fname_prepare_lookup functions. The vulnerability has been addressed by ensuring that the allocated memory is freed in the error handling paths of both functions.
The vulnerability can lead to memory leaks, which may cause increased memory usage and potential exhaustion of system resources over time.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the Linux kernel can be found in the official Linux documentation or through the package management system of the respective Linux distribution.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.