CVE-2023-53391

Summary

In the Linux kernel, the following vulnerability has been resolved:

shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs

As the ramfs-based tmpfs uses ramfs_init_fs_context() for the init_fs_context method, which allocates fc->s_fs_info, use ramfs_kill_sb() to free it and avoid a memory leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc3b1b1cbf002e65a3cabd479e68b5f35886a26db < 5fada375113767b3b57f1b04f7a4fe64ffaa626faffected
LinuxLinuxc3b1b1cbf002e65a3cabd479e68b5f35886a26db < 487f229efea80c00dd7397547ec4f25fb8999d99affected
LinuxLinuxc3b1b1cbf002e65a3cabd479e68b5f35886a26db < 1f34bf8b442c6d720e7fa6f15e8702427e48aea9affected
LinuxLinuxc3b1b1cbf002e65a3cabd479e68b5f35886a26db < ebe07db840992a3886694ac3d303b06f4b70ce00affected
LinuxLinuxc3b1b1cbf002e65a3cabd479e68b5f35886a26db < 36ce9d76b0a93bae799e27e4f5ac35478c676592affected
LinuxLinux2.6.30affected
LinuxLinux0 < 2.6.30unaffected
LinuxLinux5.10.188 <= 5.10.*unaffected
LinuxLinux5.15.121 <= 5.15.*unaffected
LinuxLinux6.1.39 <= 6.1.*unaffected
LinuxLinux6.4.4 <= 6.4.*unaffected
LinuxLinux6.5 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References