Linux Kernel Memory Leak Vulnerability in mlx5e_init_rep_rx Function

A memory leak vulnerability has been identified in the Linux kernel's handling of the Mellanox mlx5 network driver. Specifically, the issue arises in the mlx5e_init_rep_rx function, where the memory allocated for the rx_res pointer is not properly released in the event of an error. This oversight can lead to a memory leak. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can cause a memory leak, where allocated memory is not properly freed, potentially leading to increased memory usage and exhaustion over time.

Reproduction

The vulnerability can be reproduced by invoking the mlx5e_init_rep_rx function in the context of a Mellanox mlx5 network device. If an error occurs while opening the drop receive queue or initializing the receive resources, the function will exit without freeing the allocated memory for the receive resources, thereby creating a memory leak.

Remediation

The vulnerability has been addressed in the Linux kernel stable tree. Users can upgrade to the latest version to apply the fix.