medium5.5
CVE-2023-53359
In the Linux kernel, the following vulnerability has been resolved: USB: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result m…
Impact
In the Linux kernel, the following vulnerability has been resolved: USB: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | before 5.15.100 from 5.16 before 6.1.18 from 6.2 before 6.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://git.kernel.org/stable/c/30374434edab20e25776f8ecb4bc9d1e54309487
- https://git.kernel.org/stable/c/6683327b51a601daba32900072349dfa1d4e8fea
- https://git.kernel.org/stable/c/c68ece7baf2aa9783b8244482c03010d477d4a93
- https://git.kernel.org/stable/c/cc00340fb1226a2a3a5cf15473ac417da3c952f1