Memory Leak Vulnerability in Linux Kernel USB Gadget

CVE-2023-53407

What is CVE-2023-53407?

A memory leak vulnerability exists in the USB gadget implementation of the Linux kernel, specifically affecting the pxa27x_udc driver. When the debugfs_lookup() function is called, it is crucial to invoke dput() on its result to prevent memory from leaking over time. Developers are advised to utilize debugfs_lookup_and_remove(), which simplifies the process by managing the necessary calls internally, thus mitigating the risk of memory leaks.

References