Memory Leak Vulnerability in Linux Kernel Affecting Debugfs Component

CVE-2023-53408

What is CVE-2023-53408?

A memory leak vulnerability exists in the Linux kernel's debugfs component related to the blktrace functionality. When using debugfs_lookup(), the absence of dput() results in uncollected memory over time, leading to increasing memory usage and potential system performance degradation. It is recommended to utilize debugfs_lookup_and_remove() to ensure proper memory management and mitigate this issue effectively.

References