In the Linux kernel, the following vulnerability has been resolved:
trace/blktrace: fix memory leak with using debugfs_lookup()
When calling debugfslookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove() instead which handles all of the logic at once.
{ "vanir_signatures": [ { "digest": { "length": 357.0, "function_hash": "147941397944329545300383295555721372726" }, "target": { "function": "blk_trace_free", "file": "kernel/trace/blktrace.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@83e8864fee26f63a7435e941b7c36a20fd6fe93e", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53408-04ed21e0" }, { "digest": { "length": 357.0, "function_hash": "147941397944329545300383295555721372726" }, "target": { "function": "blk_trace_free", "file": "kernel/trace/blktrace.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2e4b48d6f9b39aa19bafe223f9dd436a692fc80", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53408-37fecbbb" }, { "digest": { "line_hashes": [ "306437739061020709660260910118847173530", "238687943044888303973027111755734156303", "141048781721455985241258835721463289343", "66750162021843811511410549495601253813", "140265979332941449547436650001622859535" ], "threshold": 0.9 }, "target": { "file": "kernel/trace/blktrace.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2e4b48d6f9b39aa19bafe223f9dd436a692fc80", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53408-41ee3fc7" }, { "digest": { "line_hashes": [ "306437739061020709660260910118847173530", "238687943044888303973027111755734156303", "141048781721455985241258835721463289343", "66750162021843811511410549495601253813", "140265979332941449547436650001622859535" ], "threshold": 0.9 }, "target": { "file": "kernel/trace/blktrace.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3036f5f5ae5210797d95446795df01c1249af9ad", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53408-4921b795" }, { "digest": { "line_hashes": [ "306437739061020709660260910118847173530", "238687943044888303973027111755734156303", "141048781721455985241258835721463289343", "66750162021843811511410549495601253813", "140265979332941449547436650001622859535" ], "threshold": 0.9 }, "target": { "file": "kernel/trace/blktrace.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@83e8864fee26f63a7435e941b7c36a20fd6fe93e", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53408-680efe53" }, { "digest": { "length": 357.0, "function_hash": "147941397944329545300383295555721372726" }, "target": { "function": "blk_trace_free", "file": "kernel/trace/blktrace.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5286b72fb425291af5f4ca7285d73c16a08d8691", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53408-6df4053b" }, { "digest": { "length": 357.0, "function_hash": "147941397944329545300383295555721372726" }, "target": { "function": "blk_trace_free", "file": "kernel/trace/blktrace.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3036f5f5ae5210797d95446795df01c1249af9ad", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53408-774a31dc" }, { "digest": { "line_hashes": [ "306437739061020709660260910118847173530", "238687943044888303973027111755734156303", "141048781721455985241258835721463289343", "66750162021843811511410549495601253813", "140265979332941449547436650001622859535" ], "threshold": 0.9 }, "target": { "file": "kernel/trace/blktrace.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5286b72fb425291af5f4ca7285d73c16a08d8691", "deprecated": false, "signature_version": "v1", "id": "CVE-2023-53408-dc114443" } ] }