Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and tx_fc_pfvf_bmap) are allocated by cgx_lmac_init() but never freed in cgx_lmac_exit(). Unbinding and rebinding the driver therefore triggers kmemleak: unreferenced object (size 16): backtrace: rvu_alloc_bitmap cgx_probe Free both bitmaps during teardown. A flaw was found in the Linux kernel’s octeontx2-af CGX driver. This vulnerability occurs because RX/TX flow-control bitmaps are allocated during initialization but are not properly freed when the driver is unbound and rebound. A local attacker could repeatedly unbind and rebind the driver, leading to a kernel memory leak (kmemleak). Over time, this could result in resource exhaustion and potentially impact system stability.Details
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 13 | Planned | — |
| Ubuntu 24.04 | Planned | — |
| Ubuntu 24.04 AWS | Planned | — |