Memory Leak Vulnerability in Linux Kernel Related to cfctrl_linkup_request()

CVE-2023-53330

What is CVE-2023-53330?

A vulnerability has been identified in the Linux kernel, specifically within the cfctrl_linkup_request() function. This flaw could lead to memory leaks when the link type is unknown or if memory allocation (kzalloc) fails. Under these circumstances, the memory allocated for the packet is not released, which could eventually exhaust system resources. A proper release process has been added to ensure that memory is correctly managed even in error scenarios, mitigating the risk associated with this vulnerability.

References