Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been addressed in the Linux kernel's DRM XE (Extreme Engineering) subsystem, specifically within the register save-restore management. The issue arose in versions of the Linux kernel prior to the latest stable release, where the function 'xa_store' could fail, leading to a memory leak by not properly freeing the allocated entry. The vulnerability has been fixed by modifying the error handling to ensure that memory is correctly released when 'xa_store' fails.
The vulnerability could lead to a memory leak, causing increased memory usage and potentially degrading system performance over time.
The vulnerability can be reproduced by adding a save-restore register entry in the DRM XE subsystem using the 'xe_reg_sr_add' function. If the 'xa_store' operation fails, the error path will be triggered, leading to a memory leak by not freeing the allocated entry. This behavior can be observed in the affected versions of the Linux kernel.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The patch for this issue is included in the official Linux kernel stable releases.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.