Memory Leak Vulnerability in Linux Kernel Affects USB Subsystem

CVE-2023-53417

What is CVE-2023-53417?

A memory leak vulnerability exists in the Linux kernel's USB subsystem, specifically within the handling of the debugfs_lookup() function. If not properly addressed, the failure to call dput() after using debugfs_lookup() can lead to increased memory usage over time, which may affect system performance and stability. To mitigate this issue, it's recommended to use the debugfs_lookup_and_remove() function, which incorporates the necessary cleanup logic, preventing memory leaks effectively.

References