Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A refcount leak vulnerability has been identified in the Linux kernel's TI PM33XX SOC driver, specifically within the AM33XX platform probe function. The issue arises because the 'wkup_m3_ipc_get()' function increments a reference count that is not properly decremented in error scenarios, leading to a memory management flaw. This vulnerability affects several versions of the Linux kernel.
Exploitation of this vulnerability could lead to a memory leak, where reference counts are not properly managed, potentially causing increased memory usage or other unintended side effects.
The vulnerability can be reproduced by invoking the 'am33xx_pm_probe' function within the 'drivers/soc/ti/pm33xx.c' file. This function will attempt to allocate SRAM and set up the RTC, but if these operations fail, the missing reference count release will create a leak.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.