Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's net/mlx5e component, specifically within the mlx5e_ptp_open function. This issue arises when the kvzalloc_node or kvzalloc functions fail, leaving the memory referenced by 'c' or 'cparams' unfreed. The vulnerability can lead to a memory leak, as the allocated memory is not released. The issue has been addressed by modifying the error handling path to properly free the allocated arrays.
Exploitation of this vulnerability can lead to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.
To reproduce this vulnerability, invoke the mlx5e_ptp_open function in a scenario where the kvzalloc_node or kvzalloc functions fail. This can be simulated by causing a memory allocation failure, which will result in the 'c' or 'cparams' variables being allocated memory that is not freed, leading to a memory leak.
The vulnerability has been fixed in the Linux kernel stable tree. Users can upgrade to the latest version of the stable kernel to address this issue.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.