Memory Leak Vulnerability in Microchip VCAP API for Linux Kernel

CVE-2023-53303

What is CVE-2023-53303?

A memory leak vulnerability in the Microchip VCAP API within the Linux kernel has been identified, specifically during the execution of the vcap_dup_rule() function. This issue arises when the configuration for CONFIG_VCAP_KUNIT_TEST is selected, leading to potential memory leaks if the kzalloc() operation is successful but the subsequent kmemdup() operation fails. As a result, allocated memory for 'duprule', 'ckf', and 'caf' is not properly freed, which can lead to system resource exhaustion over time. This vulnerability highlights the importance of proper memory management in kernel development.

References