Memory Leak Vulnerability in Linux Kernel Affecting Various Distributions

CVE-2023-53402

What is CVE-2023-53402?

A memory leak vulnerability exists in the Linux Kernel, specifically within the 'debugfs_lookup()' function. When this function is used to look up directories in the debug filesystem, it is crucial for developers to ensure that the result is properly released using 'dput()'. Failure to do so results in accumulated memory leaks over time, potentially causing resource exhaustion in systems. To enhance code stability and prevent memory issues, developers are encouraged to utilize 'debugfs_lookup_and_remove()', a function that automatically handles memory management, thus simplifying the implementation process.

References