Linux Kernel Refcount Leak Vulnerability in TI PM33XX SOC Driver

Vulnerability

A refcount leak vulnerability has been identified in the Linux kernel's TI PM33XX SOC driver, specifically within the AM33XX platform probe function. The issue arises because the 'wkup_m3_ipc_get()' function increments a reference count that is not properly decremented in error scenarios, leading to a memory management flaw. This vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability could lead to a memory leak, where reference counts are not properly managed, potentially causing increased memory usage or other unintended side effects.

Reproduction

The vulnerability can be reproduced by invoking the 'am33xx_pm_probe' function within the 'drivers/soc/ti/pm33xx.c' file. This function will attempt to allocate SRAM and set up the RTC, but if these operations fail, the missing reference count release will create a leak.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Dec 8, 2025, 2:45 AM
Updated: Dec 8, 2025, 2:45 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
1.3
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.