Linux Kernel Device Node Leak Vulnerability in EDAC Versalnet Driver

A memory leak vulnerability has been identified in the Linux kernel's EDAC Versalnet driver. The issue arises in the 'mc_probe()' function, where the 'of_parse_phandle()' call returns a device node reference that is not properly released, leading to a memory leak. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability causes a memory leak, which can lead to increased memory usage and potential exhaustion of system resources over time.

Reproduction

The vulnerability can be reproduced by loading the EDAC Versalnet driver, which includes the 'mc_probe()' function. The driver will parse a device node reference that is not released, causing a memory leak.

Remediation

The vulnerability has been fixed in the Linux kernel stable tree. Users can download the patched version from the Linux kernel Git repository.