Linux vulnerability

What happened

In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When topology_physical_package_id()/topology_logical_die_id() returns a negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL) directly without freeing the rapl_package structure that was just allocated by kzalloc_obj(), leaking memory on every failed package addition. Use the existing err_free_package label so that the allocation is released on the error path.

Affected versions

Linux: 26096aed255fbac9501718174dbb24c935d8854e through before 3e9e9337e03be946ec93f2c9d28dab242482be1b (git); 26096aed255fbac9501718174dbb24c935d8854e through before 992c60771749d8d8cbfbd06049785fff95c72df1 (git); 26096aed255fbac9501718174dbb24c935d8854e through before bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47 (git); f8a7fa068be099fe3406178ab047cba7c8456203 (git); f575a20bd53ea755800e79c2b7aea20e9b0b2242 (git); 6.10.12 through before 6.11 (semver); 6.11.1 through before 6.12 (semver); 6.12 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.