Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's AMDGPU driver, specifically within the ACPI enumeration function. When the function 'amdgpu_acpi_dev_init()' fails and returns an 'ENOMEM' error, the allocated 'xcc_info' is not properly released, leading to a memory leak. This issue has been addressed by modifying the error handling to ensure 'xcc_info' is freed before the function exits. The vulnerability affects several versions of the Linux kernel.
The vulnerability causes a memory leak, which can lead to increased memory usage and potential exhaustion of system resources over time.
The vulnerability can be reproduced by invoking the 'amdgpu_acpi_enumerate_xcc()' function in a scenario where 'amdgpu_acpi_dev_init()' returns an 'ENOMEM' error. This will cause the function to exit without freeing the allocated 'xcc_info', thereby creating a memory leak.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the updated kernel can be found on the official Linux kernel website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.