Linux Kernel Memory Leak Vulnerability in PowerPC Pseries Bus Initialization

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's PowerPC Pseries architecture, specifically within the 'ibmebus_bus_init()' function. When 'device_register()' fails, the function does not properly release a kobject name allocated by 'dev_set_name()', leading to a memory leak. The issue arises because 'put_device()' is not called to decrement the reference count set by 'device_initialize()', preventing the name from being freed during 'kobject_cleanup()'.

Impact

The vulnerability can cause a memory leak, where allocated memory is not properly released, potentially leading to increased memory usage and exhaustion over time.

Reproduction

The vulnerability can be reproduced by initializing the 'ibmebus' bus on a PowerPC Pseries system in a way that 'device_register()' returns an error. This will cause the 'ibmebus_bus_init()' function to exit prematurely without releasing the allocated kobject name, creating a memory leak.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.

Added: Dec 24, 2025, 12:51 PM
Updated: Dec 24, 2025, 12:51 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
7.7
relevance
1.6
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.