Memory Leak Vulnerability in Linux Kernel's UBIFS Module

CVE-2023-53278

What is CVE-2023-53278?

A memory leak vulnerability has been identified in the UBIFS module of the Linux kernel. When the module is loaded using 'insmod ubifs.ko', it can result in unreferenced memory objects that are not properly cleaned up. This issue arises particularly when the 'kset_register()' function encounters a failure, and the necessary cleanup functions are not called. This flaw can lead to excessive memory consumption over time, ultimately impacting the system's performance and stability. It is essential for users of affected kernel versions to apply security patches to mitigate this issue.

References