Linux Kernel PCI Resource Management Vulnerability Leading to Resource Leaks

A vulnerability in the Linux kernel's PCI resource management can cause resource leaks. The issue arises because the 'release_resource()' function does not properly free resources or their associated list entries after coalescing, leading to potential memory leaks. This vulnerability affects the Linux kernel stable tree, specifically versions 5.16 and later.

Impact

The vulnerability can lead to memory leaks by failing to properly release PCI resources, potentially causing increased memory usage and degradation of system performance over time.

Reproduction

The vulnerability can be reproduced by registering a PCI host bridge and coalescing resources. If the coalesced resource is released, the 'release_resource()' function will not free the resource or its list entry, unless the list entry is manually freed, leading to a memory leak.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed.