Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's IMX93 clock driver. When an error occurs during the 'probe()' function, the driver fails to unregister hardware clocks, leading to a memory leak. This issue affects the Linux kernel stable tree.
The vulnerability causes a memory leak, which can lead to increased memory usage and potential exhaustion of system resources over time.
The vulnerability can be reproduced by loading the IMX93 clock driver and inducing an error during the 'probe()' function. This will cause the function to return prematurely without properly unregistering the hardware clocks, leading to a memory leak.
The vulnerability has been addressed by modifying the 'probe()' function to include a 'goto unregister_hws;' statement when an error occurs. This change ensures that the hardware clocks are properly unregistered, preventing the memory leak.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.