Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's Direct Rendering Manager (DRM) V3D component. This issue arises when a job in the Command List/Compute Shader (CL/CSD) stage times out. Instead of resetting the hardware, the timeout is skipped to allow long-running jobs a chance to complete. However, this process removes the job from the pending list, preventing it from being properly freed once it finishes. As a result, the skipped reset leads to a memory leak, as the job remains active without being released. This vulnerability has been addressed by ensuring that jobs are reinstated on the pending list when their timeout is extended, similar to a previous fix in the DRM Etnaviv component.
Exploitation of this vulnerability causes a memory leak, where resources are not properly released, potentially leading to increased memory usage and degradation of system performance over time.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.