In the Linux kernel, the following vulnerability has been resolved:
ubifs: Fix memory leak in do_rename
If renaming a file in an encrypted directory, function fscryptsetupfilename allocates memory for a file name. This name is never used, and before returning to the caller the memory for it is not freed.
When running kmemleak on it we see that it is registered as a leak. The report below is triggered by a simple program 'rename' that renames a file in an encrypted directory:
unreferenced object 0xffff888101502840 (size 32): comm "rename", pid 9404, jiffies 4302582475 (age 435.735s) backtrace: _kmemcacheallocnode _kmalloc fscryptsetupfilename dorename ubifsrename vfsrename do_renameat2
To fix this we can remove the call to fscryptsetupfilename as it's not needed.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53396.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53396.json"
[
{
"id": "CVE-2023-53396-116d92e3",
"digest": {
"length": 881.0,
"function_hash": "29991702405655468889745271792842808618"
},
"signature_type": "Function",
"target": {
"file": "fs/ubifs/dir.c",
"function": "create_whiteout"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e264f67b7d6580eff5c2696961039fd05c69258",
"deprecated": false
},
{
"id": "CVE-2023-53396-1a855547",
"digest": {
"length": 881.0,
"function_hash": "29991702405655468889745271792842808618"
},
"signature_type": "Function",
"target": {
"file": "fs/ubifs/dir.c",
"function": "create_whiteout"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f565752b328fe53c9e42b7d4e4d89a1da63d738",
"deprecated": false
},
{
"id": "CVE-2023-53396-1d5971fb",
"digest": {
"threshold": 0.9,
"line_hashes": [
"126336657634468777324302881112991957563",
"10016918318032715868854046532364256900",
"134433206962466964525265446565442982117",
"115602194265072398099252646279645188019",
"230723711445301155075543783505666698014",
"39178061841547649449019206423060026392",
"227305176242589043809568691660077257573",
"75955060588655669324161222503362517003",
"273451191741792888124484141704619717567",
"264686412742964919272051812974205203740",
"315994849018938618792510654171397281653",
"298770068577138843412423062287686855553",
"200297774694918522368796214335872018080"
]
},
"signature_type": "Line",
"target": {
"file": "fs/ubifs/dir.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@517ddc0259d7a7231486bdafde8035c478bc4088",
"deprecated": false
},
{
"id": "CVE-2023-53396-252965b4",
"digest": {
"length": 881.0,
"function_hash": "29991702405655468889745271792842808618"
},
"signature_type": "Function",
"target": {
"file": "fs/ubifs/dir.c",
"function": "create_whiteout"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a36d20e012903f45714df2731261fdefac900cb",
"deprecated": false
},
{
"id": "CVE-2023-53396-3bab2bce",
"digest": {
"threshold": 0.9,
"line_hashes": [
"126336657634468777324302881112991957563",
"10016918318032715868854046532364256900",
"134433206962466964525265446565442982117",
"115602194265072398099252646279645188019",
"230723711445301155075543783505666698014",
"39178061841547649449019206423060026392",
"227305176242589043809568691660077257573",
"75955060588655669324161222503362517003",
"273451191741792888124484141704619717567",
"264686412742964919272051812974205203740",
"315994849018938618792510654171397281653",
"298770068577138843412423062287686855553",
"200297774694918522368796214335872018080"
]
},
"signature_type": "Line",
"target": {
"file": "fs/ubifs/dir.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e264f67b7d6580eff5c2696961039fd05c69258",
"deprecated": false
},
{
"id": "CVE-2023-53396-56fdb0a2",
"digest": {
"length": 881.0,
"function_hash": "29991702405655468889745271792842808618"
},
"signature_type": "Function",
"target": {
"file": "fs/ubifs/dir.c",
"function": "create_whiteout"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@517ddc0259d7a7231486bdafde8035c478bc4088",
"deprecated": false
},
{
"id": "CVE-2023-53396-9fef9d68",
"digest": {
"threshold": 0.9,
"line_hashes": [
"126336657634468777324302881112991957563",
"10016918318032715868854046532364256900",
"134433206962466964525265446565442982117",
"115602194265072398099252646279645188019",
"230723711445301155075543783505666698014",
"39178061841547649449019206423060026392",
"227305176242589043809568691660077257573",
"75955060588655669324161222503362517003",
"273451191741792888124484141704619717567",
"264686412742964919272051812974205203740",
"315994849018938618792510654171397281653",
"298770068577138843412423062287686855553",
"200297774694918522368796214335872018080"
]
},
"signature_type": "Line",
"target": {
"file": "fs/ubifs/dir.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43b2f7d690697182beed6f71aa57b7249d3cfc9c",
"deprecated": false
},
{
"id": "CVE-2023-53396-ab9a5e2a",
"digest": {
"length": 881.0,
"function_hash": "29991702405655468889745271792842808618"
},
"signature_type": "Function",
"target": {
"file": "fs/ubifs/dir.c",
"function": "create_whiteout"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43b2f7d690697182beed6f71aa57b7249d3cfc9c",
"deprecated": false
},
{
"id": "CVE-2023-53396-bb87da67",
"digest": {
"threshold": 0.9,
"line_hashes": [
"126336657634468777324302881112991957563",
"10016918318032715868854046532364256900",
"134433206962466964525265446565442982117",
"115602194265072398099252646279645188019",
"230723711445301155075543783505666698014",
"39178061841547649449019206423060026392",
"227305176242589043809568691660077257573",
"75955060588655669324161222503362517003",
"273451191741792888124484141704619717567",
"264686412742964919272051812974205203740",
"315994849018938618792510654171397281653",
"298770068577138843412423062287686855553",
"200297774694918522368796214335872018080"
]
},
"signature_type": "Line",
"target": {
"file": "fs/ubifs/dir.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a36d20e012903f45714df2731261fdefac900cb",
"deprecated": false
},
{
"id": "CVE-2023-53396-d29b8f6f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"126336657634468777324302881112991957563",
"10016918318032715868854046532364256900",
"134433206962466964525265446565442982117",
"115602194265072398099252646279645188019",
"230723711445301155075543783505666698014",
"39178061841547649449019206423060026392",
"227305176242589043809568691660077257573",
"75955060588655669324161222503362517003",
"273451191741792888124484141704619717567",
"264686412742964919272051812974205203740",
"315994849018938618792510654171397281653",
"298770068577138843412423062287686855553",
"200297774694918522368796214335872018080"
]
},
"signature_type": "Line",
"target": {
"file": "fs/ubifs/dir.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f565752b328fe53c9e42b7d4e4d89a1da63d738",
"deprecated": false
}
]