CVE-2023-54188

Summary

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: apple-admac: Fix 'current_tx' not getting freed

In terminate_all we should queue up all submitted descriptors to be freed. We do that for the content of the 'issued' and 'submitted' lists, but the 'current_tx' descriptor falls through the cracks as it's removed from the 'issued' list once it gets assigned to be the current descriptor. Explicitly queue up freeing of the 'current_tx' descriptor to address a memory leak that is otherwise present.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxb127315d9a78c011c011b88b92f650510edcfbd2 < b7abd535881a48587961c2099b1d2933ebd42c4baffected
LinuxLinuxb127315d9a78c011c011b88b92f650510edcfbd2 < fd4d88e68c75caf5c6f8293a36bc3ae289e0369eaffected
LinuxLinuxb127315d9a78c011c011b88b92f650510edcfbd2 < d9503be5a100c553731c0e8a82c7b4201e8a970caffected
LinuxLinux6.0affected
LinuxLinux0 < 6.0unaffected
LinuxLinux6.1.25 <= 6.1.*unaffected
LinuxLinux6.2.12 <= 6.2.*unaffected
LinuxLinux6.3 <= *unaffected

Weaknesses

References