Linux Kernel USB Chipidea Memory Leak Vulnerability

CVE-2023-53334

What is CVE-2023-53334?

A memory leak issue has been identified in the USB Chipidea subsystem of the Linux kernel, arising when the function debugfs_lookup() is called without releasing the allocated memory through dput(). This oversight may cause increasing memory consumption over time, potentially affecting system stability. To mitigate this issue, it is recommended to use debugfs_lookup_and_remove(), which efficiently handles the required memory management. Addressing this vulnerability is crucial for maintaining optimal performance and security of systems operating on the affected Linux kernel versions.

References