Linux Kernel Memory Leak Vulnerability in XDP_DROP Non-Zero-Copy Mode

A memory leak vulnerability has been identified in the Linux kernel's handling of XDP_DROP in non-zero-copy mode, specifically within the ICSSG PRU Ethernet driver. This issue arises because pages dropped by XDP programs in the standard page pool mode are not returned to the page pool, leading to out-of-memory conditions. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can cause out-of-memory conditions by failing to recycle pages back to the page pool, which can lead to resource exhaustion.

Remediation

The vulnerability has been addressed in the Linux kernel. Users can apply the latest patches available in the Linux stable tree to mitigate this issue.