Linux Kernel Ice Driver Memory Leak Vulnerability in Ring Parameter Management

A memory leak vulnerability has been identified in the Linux kernel's Ice Ethernet driver, specifically within the 'ice_set_ringparam' function. The issue arises because transmission (tx) rings and eXpress Data Path (XDP) rings are allocated before the reception (rx) rings. If the allocation of rx rings fails, the function exits prematurely, causing a leak of both tx and XDP rings. Additionally, if an individual Rx ring setup fails during processing, the function releases the tx rings but fails to free the XDP rings, leading to another memory leak. This vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability leads to a memory leak, causing increased memory usage and potential degradation of system performance over time.

Remediation

Users can apply the patch available in the Linux kernel stable tree to address this vulnerability. The patched version can be downloaded from the Linux kernel Git repository.