In the Linux kernel, the following vulnerability has been resolved:
scsi: scsidhalua: Fix memleak for 'qdata' in alua_activate()
If aluartpgqueue() failed from alua_activate(), then 'qdata' is not freed, which will cause following memleak:
unreferenced object 0xffff88810b2c6980 (size 32): comm "kworker/u16:2", pid 635322, jiffies 4355801099 (age 1216426.076s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40 39 24 c1 ff ff ff ff 00 f8 ea 0a 81 88 ff ff @9$............. backtrace: [<0000000098f3a26d>] aluaactivate+0xb0/0x320 [<000000003b529641>] scsidhactivate+0xb2/0x140 [<000000007b296db3>] activatepathwork+0xc6/0xe0 [dmmultipath] [<000000007adc9ace>] processonework+0x3c5/0x730 [<00000000c457a985>] workerthread+0x93/0x650 [<00000000cb80e628>] kthread+0x1ba/0x210 [<00000000a1e61077>] retfrom_fork+0x22/0x30
Fix the problem by freeing 'qdata' in error path.
{ "vanir_signatures": [ { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c", "function": "alua_activate" }, "deprecated": false, "digest": { "length": 836.0, "function_hash": "263757320659161787806345810394814861656" }, "id": "CVE-2023-53078-16e3b291", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c4d71424df34fc23dc5336d09394ce68c849542" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c" }, "deprecated": false, "digest": { "line_hashes": [ "2402659591360029420696115408666167318", "199208285567792327821237562707756004099", "302231089217949219943506869517995613106", "102498309691579820312235008598350643425", "45483922563061247949229730134743068655", "14594154957489435907405501477047569688", "320768994150494928308061169874258290357" ], "threshold": 0.9 }, "id": "CVE-2023-53078-3373c5de", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d89254a4320eb7de0970c478172f764125c6355" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c", "function": "alua_activate" }, "deprecated": false, "digest": { "length": 836.0, "function_hash": "263757320659161787806345810394814861656" }, "id": "CVE-2023-53078-6607d657", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@123483df146492ca22b503ae6dacc2ce7c3a3974" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c" }, "deprecated": false, "digest": { "line_hashes": [ "2402659591360029420696115408666167318", "199208285567792327821237562707756004099", "302231089217949219943506869517995613106", "102498309691579820312235008598350643425", "45483922563061247949229730134743068655", "14594154957489435907405501477047569688", "320768994150494928308061169874258290357" ], "threshold": 0.9 }, "id": "CVE-2023-53078-70bd63bd", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9311e7a554dffd3823499e309a8b86a5cd1540e5" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c", "function": "alua_activate" }, "deprecated": false, "digest": { "length": 836.0, "function_hash": "263757320659161787806345810394814861656" }, "id": "CVE-2023-53078-851a5415", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c09cdf6eb815ee35e55d6c50ac7f63db58bd20b8" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c", "function": "alua_activate" }, "deprecated": false, "digest": { "length": 836.0, "function_hash": "263757320659161787806345810394814861656" }, "id": "CVE-2023-53078-8d291277", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a13faca032acbf2699293587085293bdfaafc8ae" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c", "function": "alua_activate" }, "deprecated": false, "digest": { "length": 836.0, "function_hash": "263757320659161787806345810394814861656" }, "id": "CVE-2023-53078-8d89bd76", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c110051d335ef7f62ad33474b0c23997fee5bfb5" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c" }, "deprecated": false, "digest": { "line_hashes": [ "2402659591360029420696115408666167318", "199208285567792327821237562707756004099", "302231089217949219943506869517995613106", "102498309691579820312235008598350643425", "45483922563061247949229730134743068655", "14594154957489435907405501477047569688", "320768994150494928308061169874258290357" ], "threshold": 0.9 }, "id": "CVE-2023-53078-8eede75b", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c4d71424df34fc23dc5336d09394ce68c849542" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c", "function": "alua_activate" }, "deprecated": false, "digest": { "length": 836.0, "function_hash": "263757320659161787806345810394814861656" }, "id": "CVE-2023-53078-937ecf01", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c55982beb80c7d3c30278fc6cfda8496a31dbe6" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c" }, "deprecated": false, "digest": { "line_hashes": [ "2402659591360029420696115408666167318", "199208285567792327821237562707756004099", "302231089217949219943506869517995613106", "102498309691579820312235008598350643425", "45483922563061247949229730134743068655", "14594154957489435907405501477047569688", "320768994150494928308061169874258290357" ], "threshold": 0.9 }, "id": "CVE-2023-53078-9b7e9cd2", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a13faca032acbf2699293587085293bdfaafc8ae" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c" }, "deprecated": false, "digest": { "line_hashes": [ "2402659591360029420696115408666167318", "199208285567792327821237562707756004099", "302231089217949219943506869517995613106", "102498309691579820312235008598350643425", "45483922563061247949229730134743068655", "14594154957489435907405501477047569688", "320768994150494928308061169874258290357" ], "threshold": 0.9 }, "id": "CVE-2023-53078-a72b4734", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@123483df146492ca22b503ae6dacc2ce7c3a3974" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c", "function": "alua_activate" }, "deprecated": false, "digest": { "length": 836.0, "function_hash": "263757320659161787806345810394814861656" }, "id": "CVE-2023-53078-c5d5dc6c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d89254a4320eb7de0970c478172f764125c6355" }, { "signature_version": "v1", "signature_type": "Function", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c", "function": "alua_activate" }, "deprecated": false, "digest": { "length": 836.0, "function_hash": "263757320659161787806345810394814861656" }, "id": "CVE-2023-53078-cc8ff561", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9311e7a554dffd3823499e309a8b86a5cd1540e5" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c" }, "deprecated": false, "digest": { "line_hashes": [ "2402659591360029420696115408666167318", "199208285567792327821237562707756004099", "302231089217949219943506869517995613106", "102498309691579820312235008598350643425", "45483922563061247949229730134743068655", "14594154957489435907405501477047569688", "320768994150494928308061169874258290357" ], "threshold": 0.9 }, "id": "CVE-2023-53078-d1957132", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c09cdf6eb815ee35e55d6c50ac7f63db58bd20b8" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c" }, "deprecated": false, "digest": { "line_hashes": [ "2402659591360029420696115408666167318", "199208285567792327821237562707756004099", "302231089217949219943506869517995613106", "102498309691579820312235008598350643425", "45483922563061247949229730134743068655", "14594154957489435907405501477047569688", "320768994150494928308061169874258290357" ], "threshold": 0.9 }, "id": "CVE-2023-53078-f9310e8e", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c110051d335ef7f62ad33474b0c23997fee5bfb5" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "drivers/scsi/device_handler/scsi_dh_alua.c" }, "deprecated": false, "digest": { "line_hashes": [ "2402659591360029420696115408666167318", "199208285567792327821237562707756004099", "302231089217949219943506869517995613106", "102498309691579820312235008598350643425", "45483922563061247949229730134743068655", "14594154957489435907405501477047569688", "320768994150494928308061169874258290357" ], "threshold": 0.9 }, "id": "CVE-2023-53078-fbee56fa", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c55982beb80c7d3c30278fc6cfda8496a31dbe6" } ] }