Linux Kernel GPIB USB Driver Memory Leak Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's GPIB USB driver, specifically in versions prior to the patch. The issue arises because the driver retains references to USB devices of registered interfaces during the attachment process, without releasing them. This unaddressed retention leads to a memory leak when devices are disconnected.

Impact

The vulnerability causes a memory leak, which can lead to increased memory usage and potential exhaustion of system resources.

Reproduction

The vulnerability can be reproduced by attaching a GPIB USB device using the LPVO DIY USB GPIB driver. The driver will take references to the USB devices, which are not released when the devices are disconnected, causing a memory leak.

Remediation

Users can apply the patch available in the Linux kernel stable tree to address this vulnerability.