Linux Kernel RapidIO Memory Management Vulnerability in Net Allocation

A vulnerability in the Linux kernel's RapidIO driver has been addressed. The issue involved improper memory management in the net allocation process for RapidIO ports. When the destination ID table allocation failed, the allocated net structure was not yet registered with the network management functions, leading to a potential memory leak. The fix involved changing the memory deallocation function to properly release the allocated resources and prevent dangling pointers.

Impact

The vulnerability could lead to memory leaks and dangling pointers, which may cause undefined behavior in the kernel.

Reproduction

The vulnerability could be reproduced by allocating a destination ID table for a RapidIO port and simulating a failure in the allocation process. This would result in the allocated net structure not being properly managed, creating a memory leak and a dangling pointer reference.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.