CVE-2023-54077
- Source
- https://cve.org/CVERecord?id=CVE-2023-54077
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54077.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-54077
- Downstream
- Published
- 2025-12-24T13:03:25.790Z
- Modified
- 2026-03-10T21:48:36.974546Z
- Summary
- fs/ntfs3: Fix memory leak if ntfs_read_mft failed
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix memory leak if ntfsreadmft failed
Label ATTRROOT in ntfsreadmft() sets isroot = true and ni->niflags |= NIFLAGDIR, then next attr will goto label ATTRALLOC and alloc ni->dir.alloc_run. However two states are not always consistent and can make memory leak.
1) attrname in ATTRROOT does not fit the condition it will set isroot = true but NIFLAGDIR is not set. 2) next attrname in ATTRALLOC fits the condition and alloc ni->dir.allocrun 3) in cleanup function niclear(), when NIFLAGDIR is set, it frees ni->dir.allocrun, otherwise it frees ni->file.run 4) because NIFLAGDIR is not set in this case, ni->dir.alloc_run is leaked as kmemleak reported:
unreferenced object 0xffff888003bc5480 (size 64): backtrace: [<000000003d42e6b0>] __kmallocnode+0x4e/0x1c0 [<00000000d8e19b8a>] kvmallocnode+0x39/0x1f0 [<00000000fc3eb5b8>] runaddentry+0x18a/0xa40 [ntfs3] [<0000000011c9f978>] rununpack+0x75d/0x8e0 [ntfs3] [<00000000e7cf1819>] rununpackex+0xbc/0x500 [ntfs3] [<00000000bbf0a43d>] ntfsiget5+0xb25/0x2dd0 [ntfs3] [<00000000a6e50693>] ntfsfillsuper+0x218d/0x3580 [ntfs3] [<00000000b9170608>] gettreebdev+0x3fb/0x710 [<000000004833798a>] vfsgettree+0x8e/0x280 [<000000006e20b8e6>] pathmount+0xf3c/0x1930 [<000000007bf15a5f>] domount+0xf3/0x110 ...
Fix this by always setting isroot and NIFLAG_DIR together.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54077.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/1bc6bb657dfb0ab3b94ef6d477ca241bf7b6ec06
- https://git.kernel.org/stable/c/3030f2b9b3329db3948c1a145a5493ca6f617d50
- https://git.kernel.org/stable/c/3bb0d3eb475f01744ce6d6e998dfbd80220852a1
- https://git.kernel.org/stable/c/93bf79f989688852deade1550fb478b0a4d8daa8
- https://git.kernel.org/stable/c/bfa434c60157c9793e9b12c9b68ade02aff9f803
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54077.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-54077
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced82cae269cfa953032fbb8980a7d554d60fb00b17Fixed3030f2b9b3329db3948c1a145a5493ca6f617d50Fixed1bc6bb657dfb0ab3b94ef6d477ca241bf7b6ec06Fixed93bf79f989688852deade1550fb478b0a4d8daa8Fixed3bb0d3eb475f01744ce6d6e998dfbd80220852a1Fixedbfa434c60157c9793e9b12c9b68ade02aff9f803