Linux Kernel Memory Leak Vulnerability in Firmware Notifier Callbacks

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's firmware arm_ffa component. The issue arises from a failure to properly free memory allocated for notifier callback nodes after they are unregistered. While the registration process correctly adds the callback node to a hashtable, the unregistration process only removes the node without freeing the associated memory, leading to a memory leak.

Impact

Exploitation of this vulnerability causes a memory leak, where allocated memory is not properly released, potentially leading to increased memory usage and degradation of system performance over time.

Remediation

The vulnerability has been addressed by modifying the unregistration process to ensure that the allocated notifier callback node is freed after it is removed from the hashtable.

Added: Jul 25, 2025, 1:57 PM
Updated: Jul 25, 2025, 6:27 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.