Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A reference leak vulnerability has been identified in the Linux kernel's AMD DNA acceleration component. The issue arises in the 'aie2_populate_range()' function, which fails to properly release a reference to the 'mm_struct' before jumping back to a previous label, leading to a memory leak. This vulnerability affects the Linux kernel stable tree.
The vulnerability causes a memory leak by failing to release references to the 'mm_struct', which can lead to increased memory usage and potential exhaustion of memory resources.
The vulnerability can be reproduced by invoking the 'aie2_populate_range()' function within the AMD DNA acceleration context. The function will jump back to the 'again' label without releasing the 'mm_struct' reference, causing a leak. This behavior can be observed in the stable version of the Linux kernel.
Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed. The specific commit that resolves the issue is '21dfec59939120b20d2c7794caaa421f9450be0a'.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.