In the Linux kernel, the following vulnerability has been resolved:
ubifs: Fix memory leak in do_rename
If renaming a file in an encrypted directory, function fscryptsetupfilename allocates memory for a file name. This name is never used, and before returning to the caller the memory for it is not freed.
When running kmemleak on it we see that it is registered as a leak. The report below is triggered by a simple program 'rename' that renames a file in an encrypted directory:
unreferenced object 0xffff888101502840 (size 32): comm "rename", pid 9404, jiffies 4302582475 (age 435.735s) backtrace: _kmemcacheallocnode _kmalloc fscryptsetupfilename dorename ubifsrename vfsrename do_renameat2
To fix this we can remove the call to fscryptsetupfilename as it's not needed.
{ "vanir_signatures": [ { "digest": { "length": 881.0, "function_hash": "29991702405655468889745271792842808618" }, "target": { "function": "create_whiteout", "file": "fs/ubifs/dir.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e264f67b7d6580eff5c2696961039fd05c69258", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-116d92e3" }, { "digest": { "length": 881.0, "function_hash": "29991702405655468889745271792842808618" }, "target": { "function": "create_whiteout", "file": "fs/ubifs/dir.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f565752b328fe53c9e42b7d4e4d89a1da63d738", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-1a855547" }, { "digest": { "line_hashes": [ "126336657634468777324302881112991957563", "10016918318032715868854046532364256900", "134433206962466964525265446565442982117", "115602194265072398099252646279645188019", "230723711445301155075543783505666698014", "39178061841547649449019206423060026392", "227305176242589043809568691660077257573", "75955060588655669324161222503362517003", "273451191741792888124484141704619717567", "264686412742964919272051812974205203740", "315994849018938618792510654171397281653", "298770068577138843412423062287686855553", "200297774694918522368796214335872018080" ], "threshold": 0.9 }, "target": { "file": "fs/ubifs/dir.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@517ddc0259d7a7231486bdafde8035c478bc4088", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-1d5971fb" }, { "digest": { "length": 881.0, "function_hash": "29991702405655468889745271792842808618" }, "target": { "function": "create_whiteout", "file": "fs/ubifs/dir.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a36d20e012903f45714df2731261fdefac900cb", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-252965b4" }, { "digest": { "line_hashes": [ "126336657634468777324302881112991957563", "10016918318032715868854046532364256900", "134433206962466964525265446565442982117", "115602194265072398099252646279645188019", "230723711445301155075543783505666698014", "39178061841547649449019206423060026392", "227305176242589043809568691660077257573", "75955060588655669324161222503362517003", "273451191741792888124484141704619717567", "264686412742964919272051812974205203740", "315994849018938618792510654171397281653", "298770068577138843412423062287686855553", "200297774694918522368796214335872018080" ], "threshold": 0.9 }, "target": { "file": "fs/ubifs/dir.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e264f67b7d6580eff5c2696961039fd05c69258", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-3bab2bce" }, { "digest": { "length": 881.0, "function_hash": "29991702405655468889745271792842808618" }, "target": { "function": "create_whiteout", "file": "fs/ubifs/dir.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@517ddc0259d7a7231486bdafde8035c478bc4088", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-56fdb0a2" }, { "digest": { "line_hashes": [ "126336657634468777324302881112991957563", "10016918318032715868854046532364256900", "134433206962466964525265446565442982117", "115602194265072398099252646279645188019", "230723711445301155075543783505666698014", "39178061841547649449019206423060026392", "227305176242589043809568691660077257573", "75955060588655669324161222503362517003", "273451191741792888124484141704619717567", "264686412742964919272051812974205203740", "315994849018938618792510654171397281653", "298770068577138843412423062287686855553", "200297774694918522368796214335872018080" ], "threshold": 0.9 }, "target": { "file": "fs/ubifs/dir.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43b2f7d690697182beed6f71aa57b7249d3cfc9c", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-9fef9d68" }, { "digest": { "length": 881.0, "function_hash": "29991702405655468889745271792842808618" }, "target": { "function": "create_whiteout", "file": "fs/ubifs/dir.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43b2f7d690697182beed6f71aa57b7249d3cfc9c", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-ab9a5e2a" }, { "digest": { "line_hashes": [ "126336657634468777324302881112991957563", "10016918318032715868854046532364256900", "134433206962466964525265446565442982117", "115602194265072398099252646279645188019", "230723711445301155075543783505666698014", "39178061841547649449019206423060026392", "227305176242589043809568691660077257573", "75955060588655669324161222503362517003", "273451191741792888124484141704619717567", "264686412742964919272051812974205203740", "315994849018938618792510654171397281653", "298770068577138843412423062287686855553", "200297774694918522368796214335872018080" ], "threshold": 0.9 }, "target": { "file": "fs/ubifs/dir.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a36d20e012903f45714df2731261fdefac900cb", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-bb87da67" }, { "digest": { "line_hashes": [ "126336657634468777324302881112991957563", "10016918318032715868854046532364256900", "134433206962466964525265446565442982117", "115602194265072398099252646279645188019", "230723711445301155075543783505666698014", "39178061841547649449019206423060026392", "227305176242589043809568691660077257573", "75955060588655669324161222503362517003", "273451191741792888124484141704619717567", "264686412742964919272051812974205203740", "315994849018938618792510654171397281653", "298770068577138843412423062287686855553", "200297774694918522368796214335872018080" ], "threshold": 0.9 }, "target": { "file": "fs/ubifs/dir.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f565752b328fe53c9e42b7d4e4d89a1da63d738", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53396-d29b8f6f" } ] }