Linux Kernel PowerVR Module Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's PowerVR module. This issue arises when the module is unloaded, as the memory used for processing firmware images is not properly released. Additionally, if the firmware image processing fails during module loading, the same memory leak occurs. The vulnerability has been addressed by ensuring that all firmware Graphics Execution Manager (GEM) objects are destroyed if the firmware processing fails. The memory leaks were detected by Kmemleak, which reported unreferenced objects remaining after the PowerVR module was unloaded.

Impact

Exploitation of this vulnerability leads to memory leaks in the PowerVR module, causing unreferenced objects to remain in memory after the module is unloaded.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.