Memory Leak Vulnerability in Linux Kernel's USB Gadget Driver by Broadcom

CVE-2023-53412

What is CVE-2023-53412?

A memory leak has been identified within the USB gadget driver in the Linux kernel, specifically related to the bcm63xx_udc. The issue arises from the improper handling of memory when utilizing the debugfs_lookup() function. If the dput() function is not called after debugfs_lookup(), it leads to a gradual increase in memory usage, potentially affecting system performance. The recommended resolution is to use the debugfs_lookup_and_remove() function instead, which integrates both lookup and memory management logic, thus preventing the leak.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References