Linux Kernel DRM/Tegra Put PID Memory Leak Vulnerability

A vulnerability in the Linux kernel's DRM/Tegra subsystem has been addressed. The issue was a memory leak caused by not properly releasing a process ID (PID) after it was allocated. The function 'host1x_memory_context_alloc()' does not take ownership of the PID, leading to the leak. The vulnerability affected the Linux kernel stable tree.

Impact

The vulnerability could lead to a memory leak, causing increased memory usage and potentially degrading system performance over time.

Reproduction

The vulnerability can be reproduced by calling the 'host1x_memory_context_alloc()' function in the 'tegra_drm_ioctl_channel_open()' method without a corresponding 'put_pid()' call to release the PID. This can be done by modifying the DRM/Tegra driver to allocate a PID using 'get_task_pid()' and then failing to free it, which will result in a memory leak.

Remediation

Users can apply the latest patches from the Linux kernel stable tree to address this vulnerability.