Memory Leak in Linux Kernel's Staging PI433 Module

CVE-2023-53355

What is CVE-2023-53355?

A memory leak vulnerability exists within the Linux kernel's staging PI433 module due to improper handling of the debugfs_lookup() function. Failing to call dput() on the result of debugfs_lookup() results in excessive memory allocation over time, potentially degrading system performance. To mitigate this issue, it is recommended to use the debugfs_lookup_and_remove() function, which organizes the process effectively by handling memory management internally. This update facilitates the creation of device subdirectories while ensuring efficient memory usage.

References