Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's ASoC codecs, specifically within the WCD9335 driver. The issue arises because the driver fails to properly release regulator supplies after enabling them during the probe process. This oversight leads to leaked memory and an unbalanced count of enabled regulators, particularly during probe errors or when the device is unbound. The vulnerability has been addressed by modifying the code to use 'devm_regulator_bulk_get_enable()', which simplifies the process and ensures proper cleanup.
Exploitation of this vulnerability causes memory leaks and disrupts the balance of regulator enable counts, potentially leading to resource exhaustion or instability in the system.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.