Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's RxRPC implementation, specifically within the function 'rxrpc_preparse_xdr_yfs_rxgk()'. The issue arises when the memory associated with 'token->rxgk' is not properly freed in certain error scenarios after allocation. This vulnerability affects the Linux kernel stable tree.
The vulnerability can lead to a memory leak, where allocated memory is not released, potentially causing increased memory usage and degradation of system performance over time.
The vulnerability can be reproduced by triggering the 'rxrpc_preparse_xdr_yfs_rxgk()' function in a scenario where an error occurs after the 'token->rxgk' memory has been allocated. This will result in the 'rxgk' memory not being freed, causing a memory leak.
The vulnerability has been addressed in the Linux kernel stable tree. Users can upgrade to the latest version to apply the fix.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.