Memory Leak Vulnerability in Linux Kernel's USB Gadget Driver by Broadcom

CVE-2023-53412

What is CVE-2023-53412?

A memory leak has been identified within the USB gadget driver in the Linux kernel, specifically related to the bcm63xx_udc. The issue arises from the improper handling of memory when utilizing the debugfs_lookup() function. If the dput() function is not called after debugfs_lookup(), it leads to a gradual increase in memory usage, potentially affecting system performance. The recommended resolution is to use the debugfs_lookup_and_remove() function instead, which integrates both lookup and memory management logic, thus preventing the leak.

References