ZeroHour

CVE-2023-53271

CVSS 3.1
5.5 medium
EPSS
<1%p5
Published
()
Modified
Description

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() There is a memory leaks problem reported by kmemleak: unreferenced object 0xffff888102007a00 (size 128): comm "ubirsvol", pid 32090, jiffies 4298464136 (age 2361.231s) hex dump (first 32 bytes): ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace: [ ] __kmalloc+0x4d/0x150 [ ] ubi_eba_create_table+0x76/0x170 [ubi] [ ] ubi_resize_volume+0x1be/0xbc0 [ubi] [ ] ubi_cdev_ioctl+0x701/0x1850 [ubi] [ ] __x64_sys_ioctl+0x11d/0x170 [ ] do_syscall_64+0x35/0x80 [ ] entry_SYSCALL_64_after_hwframe+0x46/0xb0 This is due to a mismatch between create and destroy interfaces, and in detail that "new_eba_tbl" created by ubi_eba_create_table() but destroyed by kfree(), while will causing "new_eba_tbl->entries" not freed. Fix it by replacing kfree(new_eba_tbl) with ubi_eba_destroy_table(new_eba_tbl)

Vendors
linux
Products
linux kernel
Weakness
CWE-401
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.