In the Linux kernel, the following vulnerability has been resolved:
scsi: scsidhalua: Fix memleak for 'qdata' in alua_activate()
If aluartpgqueue() failed from alua_activate(), then 'qdata' is not freed, which will cause following memleak:
unreferenced object 0xffff88810b2c6980 (size 32): comm "kworker/u16:2", pid 635322, jiffies 4355801099 (age 1216426.076s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40 39 24 c1 ff ff ff ff 00 f8 ea 0a 81 88 ff ff @9$............. backtrace: [<0000000098f3a26d>] aluaactivate+0xb0/0x320 [<000000003b529641>] scsidhactivate+0xb2/0x140 [<000000007b296db3>] activatepathwork+0xc6/0xe0 [dmmultipath] [<000000007adc9ace>] processonework+0x3c5/0x730 [<00000000c457a985>] workerthread+0x93/0x650 [<00000000cb80e628>] kthread+0x1ba/0x210 [<00000000a1e61077>] retfrom_fork+0x22/0x30
Fix the problem by freeing 'qdata' in error path.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c4d71424df34fc23dc5336d09394ce68c849542",
"target": {
"function": "alua_activate",
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-16e3b291",
"signature_type": "Function",
"digest": {
"length": 836.0,
"function_hash": "263757320659161787806345810394814861656"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d89254a4320eb7de0970c478172f764125c6355",
"target": {
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-3373c5de",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"2402659591360029420696115408666167318",
"199208285567792327821237562707756004099",
"302231089217949219943506869517995613106",
"102498309691579820312235008598350643425",
"45483922563061247949229730134743068655",
"14594154957489435907405501477047569688",
"320768994150494928308061169874258290357"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@123483df146492ca22b503ae6dacc2ce7c3a3974",
"target": {
"function": "alua_activate",
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-6607d657",
"signature_type": "Function",
"digest": {
"length": 836.0,
"function_hash": "263757320659161787806345810394814861656"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9311e7a554dffd3823499e309a8b86a5cd1540e5",
"target": {
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-70bd63bd",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"2402659591360029420696115408666167318",
"199208285567792327821237562707756004099",
"302231089217949219943506869517995613106",
"102498309691579820312235008598350643425",
"45483922563061247949229730134743068655",
"14594154957489435907405501477047569688",
"320768994150494928308061169874258290357"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c09cdf6eb815ee35e55d6c50ac7f63db58bd20b8",
"target": {
"function": "alua_activate",
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-851a5415",
"signature_type": "Function",
"digest": {
"length": 836.0,
"function_hash": "263757320659161787806345810394814861656"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a13faca032acbf2699293587085293bdfaafc8ae",
"target": {
"function": "alua_activate",
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-8d291277",
"signature_type": "Function",
"digest": {
"length": 836.0,
"function_hash": "263757320659161787806345810394814861656"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c110051d335ef7f62ad33474b0c23997fee5bfb5",
"target": {
"function": "alua_activate",
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-8d89bd76",
"signature_type": "Function",
"digest": {
"length": 836.0,
"function_hash": "263757320659161787806345810394814861656"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c4d71424df34fc23dc5336d09394ce68c849542",
"target": {
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-8eede75b",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"2402659591360029420696115408666167318",
"199208285567792327821237562707756004099",
"302231089217949219943506869517995613106",
"102498309691579820312235008598350643425",
"45483922563061247949229730134743068655",
"14594154957489435907405501477047569688",
"320768994150494928308061169874258290357"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c55982beb80c7d3c30278fc6cfda8496a31dbe6",
"target": {
"function": "alua_activate",
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-937ecf01",
"signature_type": "Function",
"digest": {
"length": 836.0,
"function_hash": "263757320659161787806345810394814861656"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a13faca032acbf2699293587085293bdfaafc8ae",
"target": {
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-9b7e9cd2",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"2402659591360029420696115408666167318",
"199208285567792327821237562707756004099",
"302231089217949219943506869517995613106",
"102498309691579820312235008598350643425",
"45483922563061247949229730134743068655",
"14594154957489435907405501477047569688",
"320768994150494928308061169874258290357"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@123483df146492ca22b503ae6dacc2ce7c3a3974",
"target": {
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-a72b4734",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"2402659591360029420696115408666167318",
"199208285567792327821237562707756004099",
"302231089217949219943506869517995613106",
"102498309691579820312235008598350643425",
"45483922563061247949229730134743068655",
"14594154957489435907405501477047569688",
"320768994150494928308061169874258290357"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d89254a4320eb7de0970c478172f764125c6355",
"target": {
"function": "alua_activate",
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-c5d5dc6c",
"signature_type": "Function",
"digest": {
"length": 836.0,
"function_hash": "263757320659161787806345810394814861656"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9311e7a554dffd3823499e309a8b86a5cd1540e5",
"target": {
"function": "alua_activate",
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-cc8ff561",
"signature_type": "Function",
"digest": {
"length": 836.0,
"function_hash": "263757320659161787806345810394814861656"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c09cdf6eb815ee35e55d6c50ac7f63db58bd20b8",
"target": {
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-d1957132",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"2402659591360029420696115408666167318",
"199208285567792327821237562707756004099",
"302231089217949219943506869517995613106",
"102498309691579820312235008598350643425",
"45483922563061247949229730134743068655",
"14594154957489435907405501477047569688",
"320768994150494928308061169874258290357"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c110051d335ef7f62ad33474b0c23997fee5bfb5",
"target": {
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-f9310e8e",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"2402659591360029420696115408666167318",
"199208285567792327821237562707756004099",
"302231089217949219943506869517995613106",
"102498309691579820312235008598350643425",
"45483922563061247949229730134743068655",
"14594154957489435907405501477047569688",
"320768994150494928308061169874258290357"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c55982beb80c7d3c30278fc6cfda8496a31dbe6",
"target": {
"file": "drivers/scsi/device_handler/scsi_dh_alua.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2023-53078-fbee56fa",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"2402659591360029420696115408666167318",
"199208285567792327821237562707756004099",
"302231089217949219943506869517995613106",
"102498309691579820312235008598350643425",
"45483922563061247949229730134743068655",
"14594154957489435907405501477047569688",
"320768994150494928308061169874258290357"
]
}
}
]