CVE-2023-53278
—In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in ubifs_sysfs_init() When insmod ubifs.ko, a kmemleak reported as below: unreferenced object 0xffff88817fb1a780 (size 8): comm "insmod", pid 25265, jiffies 4295239702 (age 100.130s) hex dump (first 8 bytes): 75 62 69 66 73 00 ff ff ubifs... backtrace: [ ] slab_post_alloc_hook+0x9c/0x3c0 [ ] __kmalloc_track_caller+0x183/0x410 [ ] kstrdup+0x3a/0x80 [ ] kstrdup_const+0x66/0x80 [ ] kvasprintf_const+0x155/0x190 [ ] kobject_set_name_vargs+0x5b/0x150 [ ] kobject_set_name+0xbb/0xf0 [ ] do_one_initcall+0x14c/0x5a0 [ ] do_init_module+0x1f0/0x660 [ ] load_module+0x6d7e/0x7590 [ ] __do_sys_finit_module+0x19f/0x230 [ ] __x64_sys_finit_module+0x73/0xb0 [ ] do_syscall_64+0x35/0x80 [ ] entry_SYSCALL_64_after_hwframe+0x63/0xcd When kset_register() failed, we should call kset_put to cleanup it.
- Vendors
- linux
- Products
- linux kernel
- Weakness
- CWE-401
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.