In the Linux kernel, the following vulnerability has been resolved:
trace/blktrace: fix memory leak with using debugfs_lookup()
When calling debugfslookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove() instead which handles all of the logic at once.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53408.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53408.json"
[
{
"id": "CVE-2023-53408-04ed21e0",
"digest": {
"length": 357.0,
"function_hash": "147941397944329545300383295555721372726"
},
"signature_type": "Function",
"target": {
"file": "kernel/trace/blktrace.c",
"function": "blk_trace_free"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@83e8864fee26f63a7435e941b7c36a20fd6fe93e",
"deprecated": false
},
{
"id": "CVE-2023-53408-37fecbbb",
"digest": {
"length": 357.0,
"function_hash": "147941397944329545300383295555721372726"
},
"signature_type": "Function",
"target": {
"file": "kernel/trace/blktrace.c",
"function": "blk_trace_free"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2e4b48d6f9b39aa19bafe223f9dd436a692fc80",
"deprecated": false
},
{
"id": "CVE-2023-53408-41ee3fc7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"306437739061020709660260910118847173530",
"238687943044888303973027111755734156303",
"141048781721455985241258835721463289343",
"66750162021843811511410549495601253813",
"140265979332941449547436650001622859535"
]
},
"signature_type": "Line",
"target": {
"file": "kernel/trace/blktrace.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2e4b48d6f9b39aa19bafe223f9dd436a692fc80",
"deprecated": false
},
{
"id": "CVE-2023-53408-4921b795",
"digest": {
"threshold": 0.9,
"line_hashes": [
"306437739061020709660260910118847173530",
"238687943044888303973027111755734156303",
"141048781721455985241258835721463289343",
"66750162021843811511410549495601253813",
"140265979332941449547436650001622859535"
]
},
"signature_type": "Line",
"target": {
"file": "kernel/trace/blktrace.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3036f5f5ae5210797d95446795df01c1249af9ad",
"deprecated": false
},
{
"id": "CVE-2023-53408-680efe53",
"digest": {
"threshold": 0.9,
"line_hashes": [
"306437739061020709660260910118847173530",
"238687943044888303973027111755734156303",
"141048781721455985241258835721463289343",
"66750162021843811511410549495601253813",
"140265979332941449547436650001622859535"
]
},
"signature_type": "Line",
"target": {
"file": "kernel/trace/blktrace.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@83e8864fee26f63a7435e941b7c36a20fd6fe93e",
"deprecated": false
},
{
"id": "CVE-2023-53408-6df4053b",
"digest": {
"length": 357.0,
"function_hash": "147941397944329545300383295555721372726"
},
"signature_type": "Function",
"target": {
"file": "kernel/trace/blktrace.c",
"function": "blk_trace_free"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5286b72fb425291af5f4ca7285d73c16a08d8691",
"deprecated": false
},
{
"id": "CVE-2023-53408-774a31dc",
"digest": {
"length": 357.0,
"function_hash": "147941397944329545300383295555721372726"
},
"signature_type": "Function",
"target": {
"file": "kernel/trace/blktrace.c",
"function": "blk_trace_free"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3036f5f5ae5210797d95446795df01c1249af9ad",
"deprecated": false
},
{
"id": "CVE-2023-53408-dc114443",
"digest": {
"threshold": 0.9,
"line_hashes": [
"306437739061020709660260910118847173530",
"238687943044888303973027111755734156303",
"141048781721455985241258835721463289343",
"66750162021843811511410549495601253813",
"140265979332941449547436650001622859535"
]
},
"signature_type": "Line",
"target": {
"file": "kernel/trace/blktrace.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5286b72fb425291af5f4ca7285d73c16a08d8691",
"deprecated": false
}
]