Memory Leak Issue in Linux Kernel USB Gadget Functionality

CVE-2023-53405

What is CVE-2023-53405?

A memory leak vulnerability exists in the Linux kernel's USB gadget functionality. When using the 'debugfs_lookup()' function, if the resultant pointer is not properly released via 'dput()', memory leaks can accumulate over time, leading to inefficient memory usage. To address this issue, it is recommended to use 'debugfs_lookup_and_remove()', which simplifies the code by handling both lookup and deallocation in one operation, effectively preventing resource leaks.

References