Memory Leak in Linux Kernel Affects UBI Component

CVE-2023-53271

What is CVE-2023-53271?

The Linux kernel's UBI component had a memory leak issue where unreferenced objects reported by kmemleak were not handled properly. The problem stemmed from a mismatch between create and destroy interfaces during volume resizing operations. Specifically, an object created by ubi_eba_create_table() was incorrectly destroyed using kfree(), preventing associated entries from being freed. The resolution involved replacing kfree(new_eba_tbl) with ubi_eba_destroy_table(new_eba_tbl) to ensure proper memory management and avoid leaks.

References