Linux Kernel Virtio-Vdpa Cpumask Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's virtio-vdpa component, specifically within the function virtio_vdpa_find_vqs(). The issue arises from the improper handling of a cpumask memory allocation, which is not freed before the function returns. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage over time.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed. Instructions for downloading the updated kernel can be found on the Linux Kernel Archives.

Added: Dec 30, 2025, 3:39 PM
Updated: Dec 30, 2025, 3:39 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
7.7
relevance
1.6
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.