The netfoil project (github.com/tinfoil-factory/netfoil) contains a resource leak vulnerability in its LRU cache implementation in versions prior to 0.3.0. Specifically, when an entry is removed from the cache, a pointer to the removed element remains uncleared, causing a memory leak. This can be exploited by a local attacker to increase memory consumption of the netfoil service. The default systemd memory limit of 100MB would cause the service to restart once this threshold is exceeded. There are no known exploits in the wild and no official patch or remediation information is provided in the source data.

The vulnerability allows a local attacker to cause increased memory usage in the netfoil service due to a resource leak in the LRU cache. This can lead to service instability or restarts when the memory consumption exceeds the systemd-imposed limit of 100MB. There is no indication of privilege escalation, remote exploitation, or data compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitoring memory usage and adjusting systemd service limits or restarting the service proactively may help mitigate service disruptions. No official fix or workaround is documented in the provided data.