Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's PowerPC Pseries architecture, specifically within the 'ibmebus_bus_init()' function. When 'device_register()' fails, the function does not properly release a kobject name allocated by 'dev_set_name()', leading to a memory leak. The issue arises because 'put_device()' is not called to decrement the reference count set by 'device_initialize()', preventing the name from being freed during 'kobject_cleanup()'.
The vulnerability can cause a memory leak, where allocated memory is not properly released, potentially leading to increased memory usage and exhaustion over time.
The vulnerability can be reproduced by initializing the 'ibmebus' bus on a PowerPC Pseries system in a way that 'device_register()' returns an error. This will cause the 'ibmebus_bus_init()' function to exit prematurely without releasing the allocated kobject name, creating a memory leak.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.