Linux Kernel ICSSM PRUETH Ethernet Driver Eth Ports Node Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the ICSSM PRUETH Ethernet driver of the Linux kernel. This issue arises in the 'icssm_prueth_probe' function, where the 'eth_ports_node' is not properly released after a failure in reading a property. The node, acquired before iterating through child nodes, is left dangling, leading to a resource leak.

Impact

The vulnerability causes a memory leak by failing to release a node reference, which can lead to increased memory usage over time.

Reproduction

The vulnerability can be reproduced by loading the ICSSM PRUETH Ethernet driver and triggering a failure in the 'of_property_read_u32' function within the 'icssm_prueth_probe' method. This failure will cause the function to return without releasing the 'eth_ports_node' reference, which was obtained prior to the child node iteration.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.

Added: Jul 19, 2026, 4:44 PM
Updated: Jul 19, 2026, 4:44 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
9.9
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.