CVE-2023-52526
- Source
- https://cve.org/CVERecord?id=CVE-2023-52526
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52526.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-52526
- Downstream
- Published
- 2024-03-02T21:52:32.261Z
- Modified
- 2026-07-08T06:54:21.502379216Z
- Summary
- erofs: fix memory leak of LZMA global compressed deduplication
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix memory leak of LZMA global compressed deduplication
When stressing microLZMA EROFS images with the new global compressed deduplication feature enabled (
-Ededupe), I found some short-lived temporary pages weren't properly released, which could slowly cause unexpected OOMs hours later.Let's fix it now (LZ4 and DEFLATE don't have this issue.)
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52526.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/6a5a8f0a9740f865693d5aa97a42cc4504538e18
- https://git.kernel.org/stable/c/75a5221630fe5aa3fedba7a06be618db0f79ba1e
- https://git.kernel.org/stable/c/c955751cbf864cf2055117dd3fe7f780d2a57b56
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52526.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-52526
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git