Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory leak vulnerability has been identified in the Linux kernel's IPC interface for the IOSM driver. The issue arises in the 'ipc_imem_init()' function, where memory allocated by 'ipc_protocol_init()' is not properly released on error paths. This oversight can lead to memory leaks, as the allocated resources are not freed when the initialization process encounters a failure.
Exploitation of this vulnerability can lead to memory leaks, causing increased memory usage and potentially leading to exhaustion of system resources over time.
The vulnerability can be reproduced by initializing the IPC interface in the IOSM driver and forcing an error condition that triggers the cleanup process. During this cleanup, the 'ipc_protocol' resource is not properly released, leading to a memory leak.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability. Instructions for downloading the patched version can be found in the Linux kernel Git repository.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.