CVE-2024-41025: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-41025 is a memory leak vulnerability discovered in the Linux kernel's fastrpc driver, specifically in the audio daemon attach operation. The vulnerability was disclosed on July 29, 2024, and affects Linux kernel versions from 6.2 up to 6.6.41, 6.7 up to 6.9.10, and 6.10 release candidates (NVD). The issue occurs when the Audio PD daemon sends a name as part of the init IOCTL call, where the allocated memory for storing this name in the kernel is not properly freed.

The vulnerability stems from a missing memory deallocation in the fastrpc driver's static process creation function. When the audio daemon attaches, it sends a name parameter through an IOCTL call, which is copied to kernel space requiring memory allocation. However, this allocated memory was not being freed after use, leading to a memory leak. The issue has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability results in a memory leak in the kernel space, which could lead to gradual system resource depletion. While this doesn't present immediate security risks like code execution or privilege escalation, continued memory leaks can eventually impact system performance and stability, potentially leading to denial of service conditions (NVD).

The vulnerability requires local access with low privileges to exploit. The attack complexity is low, requiring no user interaction, but the attacker needs to have local access to the system to trigger the memory leak through the fastrpc driver's IOCTL interface (NVD).

The vulnerability has been patched in the Linux kernel through a fix that adds proper memory deallocation. The fix involves adding a kfree(name) call to release the allocated memory when it's no longer needed. Ubuntu has released updates for affected versions, including fixes in kernel version 6.8.0-48.48 for Ubuntu 24.04 LTS and corresponding versions for other Ubuntu releases (Ubuntu). Users are advised to update their systems to the patched kernel versions.