CVE-2023-53408

Summary

In the Linux kernel, the following vulnerability has been resolved:

trace/blktrace: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux78acc7dbd84a8c173a08584750845c31611160f2 < a2e4b48d6f9b39aa19bafe223f9dd436a692fc80affected
LinuxLinux30939293262eb433c960c4532a0d59c4073b2b84 < 3036f5f5ae5210797d95446795df01c1249af9adaffected
LinuxLinux30939293262eb433c960c4532a0d59c4073b2b84 < 5286b72fb425291af5f4ca7285d73c16a08d8691affected
LinuxLinux30939293262eb433c960c4532a0d59c4073b2b84 < 83e8864fee26f63a7435e941b7c36a20fd6fe93eaffected
LinuxLinux6418634238ade86f2b08192928787f39d8afb58caffected
LinuxLinux5.15.27 < 5.15.99affected
LinuxLinux5.16.13 < 5.17affected
LinuxLinux5.17affected
LinuxLinux0 < 5.17unaffected
LinuxLinux5.15.99 <= 5.15.*unaffected
LinuxLinux6.1.16 <= 6.1.*unaffected
LinuxLinux6.2.3 <= 6.2.*unaffected
LinuxLinux6.3 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References