Executive Summary

This vulnerability is a memory leak issue in the Linux kernel's drm/vc4 component related to the use of the krealloc() function.

The problem occurs because the original pointer passed to krealloc() is overwritten directly with the return value without checking if krealloc() returned NULL.

If krealloc() returns NULL, the original pointer to the still allocated memory is lost, causing a memory leak.

The fix involves using a temporary variable to store the return value of krealloc(), checking if it is NULL, and only then assigning it back to the original pointer.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to memory leaks in the Linux kernel, which may cause increased memory usage over time.

Memory leaks can degrade system performance, potentially leading to system instability or crashes if memory exhaustion occurs.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version where the drm/vc4 krealloc() memory leak has been fixed.

The fix involves changing the code to avoid overwriting the original pointer passed to krealloc() without checking if the return value is NULL. Instead, use a temporary variable to hold the return value of krealloc(), check if it is NULL, and only then assign it to the original pointer.

Additionally, use krealloc_array() instead of krealloc() where appropriate.

Useful 0 Not Useful 0