Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's Tegra SPI driver, specifically within the SLINK probe function. When the function platform_get_irq() fails, it returns an error code without properly releasing allocated resources, leading to a memory leak. This issue has been addressed by modifying the function to use a goto statement for proper cleanup. The vulnerability affects the Linux kernel stable tree.
Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.
The vulnerability can be reproduced by loading the Tegra SLINK driver in the Linux kernel stable tree. When the SLINK probe function is called, if the platform_get_irq() function fails, it will return an error code without cleaning up, causing a memory leak. This behavior can be observed by monitoring memory usage before and after the driver is loaded.
The vulnerability has been fixed in the Linux kernel stable tree. Users can upgrade to the latest version to address this issue.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.