Linux Kernel Memory Leak Vulnerability in Unittest Data Management

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's unittest data management process. Specifically, in the 'unittest_data_add()' function, if 'of_resolve_phandles()' fails, the allocated 'unittest_data' is not properly freed, resulting in a memory leak. This issue has been addressed by implementing a scope-based cleanup mechanism that automatically frees the 'unittest_data' when it goes out of scope in error scenarios. In successful cases, the ownership of the memory is transferred to the device tree to prevent double freeing.

Impact

Exploitation of this vulnerability leads to a memory leak, where allocated resources are not properly released, potentially causing increased memory usage and degradation of system performance over time.

Added: Feb 14, 2026, 4:34 PM
Updated: Feb 14, 2026, 4:34 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.5
remediation
7.7
relevance
2.8
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.