In the Linux kernel, the following vulnerability has been resolved:
ipmisi: fix a memleak in trysmi_init()
Kmemleak reported the following leak info in trysmiinit():
unreferenced object 0xffff00018ecf9400 (size 1024): comm "modprobe", pid 2707763, jiffies 4300851415 (age 773.308s) backtrace: [<000000004ca5b312>] _kmalloc+0x4b8/0x7b0 [<00000000953b1072>] trysmiinit+0x148/0x5dc [ipmisi] [<000000006460d325>] 0xffff800081b10148 [<0000000039206ea5>] dooneinitcall+0x64/0x2a4 [<00000000601399ce>] doinitmodule+0x50/0x300 [<000000003c12ba3c>] loadmodule+0x7a8/0x9e0 [<00000000c246fffe>] _sesysinitmodule+0x104/0x180 [<00000000eea99093>] _arm64sysinitmodule+0x24/0x30 [<0000000021b1ef87>] el0svccommon.constprop.0+0x94/0x250 [<0000000070f4f8b7>] doel0svc+0x48/0xe0 [<000000005a05337f>] el0svc+0x24/0x3c [<000000005eb248d6>] el0synchandler+0x160/0x164 [<0000000030a59039>] el0_sync+0x160/0x180
The problem was that when an error occurred before handlers registration
and after allocating new_smi->si_sm, the variable wouldn't be freed in
the error handling afterwards since shutdown_smi() hadn't been
registered yet. Fix it by adding a kfree() in the error handling path
in try_smi_init().
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53611.json"
}[
{
"digest": {
"length": 2866.0,
"function_hash": "76160986450131649219940942455468278827"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c5f02e16b919c8cb6024dc3778c8d8f1fb1f26b",
"deprecated": false,
"id": "CVE-2023-53611-033efced",
"signature_type": "Function",
"target": {
"function": "try_smi_init",
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2866.0,
"function_hash": "76160986450131649219940942455468278827"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7291af9a738d936c2d6869d030711dceb68404d0",
"deprecated": false,
"id": "CVE-2023-53611-1a97122c",
"signature_type": "Function",
"target": {
"function": "try_smi_init",
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"290025266109375905384997527646942729168",
"193527346045496274125869485323471051543",
"153404223742424748463657839505082803457"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f53ab5a2bf20fed59a2f7542d3453228b8056358",
"deprecated": false,
"id": "CVE-2023-53611-2663e3e6",
"signature_type": "Line",
"target": {
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"337118248151952154479861476626974899144",
"180108197653274637986669873104545627597",
"216808420563496878661495247579574544811"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9bc8fbb2d416ce87f0342478dc9fcfd79f2c65f",
"deprecated": false,
"id": "CVE-2023-53611-3d7e66b6",
"signature_type": "Line",
"target": {
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"290025266109375905384997527646942729168",
"193527346045496274125869485323471051543",
"153404223742424748463657839505082803457"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c5f02e16b919c8cb6024dc3778c8d8f1fb1f26b",
"deprecated": false,
"id": "CVE-2023-53611-41c33b5d",
"signature_type": "Line",
"target": {
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2866.0,
"function_hash": "76160986450131649219940942455468278827"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbb7d8a4b4beb3061b3a1847a742983a01dca381",
"deprecated": false,
"id": "CVE-2023-53611-57b13c4b",
"signature_type": "Function",
"target": {
"function": "try_smi_init",
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"290025266109375905384997527646942729168",
"193527346045496274125869485323471051543",
"153404223742424748463657839505082803457"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7291af9a738d936c2d6869d030711dceb68404d0",
"deprecated": false,
"id": "CVE-2023-53611-805156e9",
"signature_type": "Line",
"target": {
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2866.0,
"function_hash": "76160986450131649219940942455468278827"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6cf1a126de2992b4efe1c3c4d398f8de4aed6e3f",
"deprecated": false,
"id": "CVE-2023-53611-80519922",
"signature_type": "Function",
"target": {
"function": "try_smi_init",
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2866.0,
"function_hash": "76160986450131649219940942455468278827"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@09cb2a71b2e982015fe0464f28da1ab42b8e6375",
"deprecated": false,
"id": "CVE-2023-53611-8476d427",
"signature_type": "Function",
"target": {
"function": "try_smi_init",
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"290025266109375905384997527646942729168",
"193527346045496274125869485323471051543",
"153404223742424748463657839505082803457"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6cf1a126de2992b4efe1c3c4d398f8de4aed6e3f",
"deprecated": false,
"id": "CVE-2023-53611-99c56785",
"signature_type": "Line",
"target": {
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"290025266109375905384997527646942729168",
"193527346045496274125869485323471051543",
"153404223742424748463657839505082803457"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbb7d8a4b4beb3061b3a1847a742983a01dca381",
"deprecated": false,
"id": "CVE-2023-53611-b01cb9a5",
"signature_type": "Line",
"target": {
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2866.0,
"function_hash": "76160986450131649219940942455468278827"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f53ab5a2bf20fed59a2f7542d3453228b8056358",
"deprecated": false,
"id": "CVE-2023-53611-bd8a98d1",
"signature_type": "Function",
"target": {
"function": "try_smi_init",
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 3457.0,
"function_hash": "304582701322796654792278666009122680140"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9bc8fbb2d416ce87f0342478dc9fcfd79f2c65f",
"deprecated": false,
"id": "CVE-2023-53611-c68e2ae8",
"signature_type": "Function",
"target": {
"function": "try_smi_init",
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"290025266109375905384997527646942729168",
"193527346045496274125869485323471051543",
"153404223742424748463657839505082803457"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bfcfea0fae0d0a6c6ff5543e6d704b3807b83ce",
"deprecated": false,
"id": "CVE-2023-53611-cbe09f27",
"signature_type": "Line",
"target": {
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2866.0,
"function_hash": "76160986450131649219940942455468278827"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bfcfea0fae0d0a6c6ff5543e6d704b3807b83ce",
"deprecated": false,
"id": "CVE-2023-53611-cda9674f",
"signature_type": "Function",
"target": {
"function": "try_smi_init",
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"290025266109375905384997527646942729168",
"193527346045496274125869485323471051543",
"153404223742424748463657839505082803457"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@09cb2a71b2e982015fe0464f28da1ab42b8e6375",
"deprecated": false,
"id": "CVE-2023-53611-e7b3d45b",
"signature_type": "Line",
"target": {
"file": "drivers/char/ipmi/ipmi_si_intf.c"
},
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53611.json"