Resource Leak Vulnerability in Stratix 10 Services for Linux Kernel

CVE-2023-53255

What is CVE-2023-53255?

A vulnerability has been identified in the Linux kernel's Stratix 10 services where a potential resource leak can occur within the svc_create_memory_pool() function. This function is invoked during the probing of the Stratix 10 driver, but it lacks proper management of memory resources due to the absence of a corresponding memunmap() call. To mitigate this issue, the implementation can be adjusted to use devm_memremap(), ensuring that resources are efficiently managed and preventing potential leaks.

References