Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's mlx5 driver can lead to a memory leak of socket buffer (SKB) structures during Precision Time Protocol (PTP) synchronization operations. This issue occurs because SKBs are removed from the FIFO queue but not properly freed, causing a resource leak. The problem is exacerbated by an error in the FIFO room check, which can incorrectly report available space due to type promotion issues in C. The vulnerability affects the Linux kernel stable tree.
The vulnerability can cause a memory leak by failing to free SKB structures, potentially leading to increased memory usage and exhaustion of available resources.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.