Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's unittest data management process. Specifically, in the 'unittest_data_add()' function, if 'of_resolve_phandles()' fails, the allocated 'unittest_data' is not properly freed, resulting in a memory leak. This issue has been addressed by implementing a scope-based cleanup mechanism that automatically frees the 'unittest_data' when it goes out of scope in error scenarios. In successful cases, the ownership of the memory is transferred to the device tree to prevent double freeing.
Exploitation of this vulnerability leads to a memory leak, where allocated resources are not properly released, potentially causing increased memory usage and degradation of system performance over time.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.