Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) for the Xe graphics architecture has been addressed. The issue involved a memory leak in the buffer management system. Specifically, when the function responsible for allocating reservation objects encountered an error, it failed to free the previously allocated buffer storage. This oversight could lead to unnecessary memory consumption. The vulnerability has been fixed by ensuring that the allocated buffer is properly released in the event of an allocation failure. Additionally, comments have been added to clarify the ownership and error handling semantics of the buffer management functions.
The vulnerability could lead to a memory leak, where allocated buffer objects are not properly freed, potentially causing increased memory usage and exhaustion over time.
The vulnerability can be reproduced by triggering an allocation failure in the buffer management system while using the Direct Rendering Manager with Xe graphics. This can be done by simulating a failure in the function that allocates reservation objects, which will cause the pre-allocated buffer storage to be leaked instead of freed.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.