Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's memory management for MediaTek (MTK) SMI devices has been addressed. The issue involved a device reference leak during the LARB probe process, particularly on late probe failures and when drivers were unbound. This vulnerability affected several versions of the Linux kernel.
The vulnerability could lead to a memory leak by not properly releasing device references, potentially causing increased memory usage or exhaustion over time.
The vulnerability can be reproduced by probing an MTK SMI LARB device, particularly in scenarios where the probe is deferred or the driver is unbound. This will result in a device reference leak, as the reference taken during the SMI device lookup is not properly released.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.