I can reproduce this issue on Ubuntu 22.04 with the HWE kernel
6.8.0-90-generic.

Test environment:
- Ubuntu 22.04.5 LTS (Jammy)
- Kernel: 6.8.0-90-generic (HWE)
- Architecture: amd64
- auditd enabled and running

Audit rules used:
/etc/audit/rules.d/audit-leak.rules:
-D
-b 8192
-f 1
-r 100
-a always,exit -F arch=b64 -S openat -S truncate -S ftruncate -F exit=-EACCES 
-F auid>=1000 -F auid!=4294967295 -k access

Reproduction steps:
1. Loaded the above rules with `augenrules --load` and verified with `auditctl 
-l`.
2. As an unprivileged user (UID >= 1000), executed:
   while :; do cat /root/secretfile > /dev/null; done
3. Monitored kernel memory with:
   watch -d -n 1 'grep -i SUnreclaim /proc/meminfo'
   and `slabtop -s c`.

Observed behavior:
- SUnreclaim increases steadily over time.
- slabtop shows kmalloc-rnd-(*)-2k and skbuff_head_cache growing continuously.
- Behavior matches the original report and the upstream stack trace involving 
audit_log_start() and __alloc_skb().

This confirms the memory leak on the 6.8.0 HWE kernel series.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2098730

Title:
  Kernel 6.8.0 memory leak

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2098730/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to