Memory Leak in Linux Kernel Affects VMWare Balloon Driver

CVE-2023-53279

What is CVE-2023-53279?

A memory leak vulnerability has been identified in the Linux kernel's vmw_balloon driver, which can lead to excessive memory consumption over time. This issue arises when the debugfs_lookup() function is improperly utilized without a corresponding dput() call, preventing proper memory allocation release. To mitigate this issue, it is recommended to use the debugfs_lookup_and_remove() function, which encapsulates the necessary logic to prevent memory leaks efficiently.

References