Linux Kernel Memory Leak Vulnerability in One-Step Timestamping

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's handling of one-step synchronization timestamping. When this timestamping method is used, the hardware is set to insert the transmission time into the frame, eliminating the need to retain the socket buffer (skb). However, since the hardware does not generate an interrupt to indicate that the frame has been timestamped, the frame is never released, leading to a memory leak. This issue has been addressed by modifying the kernel to free the frame when one-step timestamping is active.

Impact

Exploitation of this vulnerability could lead to a memory leak, causing increased memory usage and potentially leading to memory exhaustion over time.

Added: Jul 3, 2025, 10:04 AM
Updated: Jul 3, 2025, 10:04 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.