Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A memory block reference leak vulnerability has been identified in the Linux kernel's memory hotplug management. This issue arises in the 'remove_memory_blocks_and_altmaps' function, where the 'find_memory_block' method acquires a reference to the memory block device but fails to release it. As a result, the reference leak occurs when memory blocks and their alternative maps are removed. This vulnerability affects the Linux kernel stable tree.
The vulnerability leads to a memory block device reference leak, which can cause resource management issues by not properly releasing references to memory block devices that are no longer needed.
The vulnerability can be reproduced by removing memory blocks and their alternative maps using the 'remove_memory_blocks_and_altmaps' function. This function will acquire a reference to the memory block device, which is not dropped before the memory block is removed, causing a reference leak.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.