Memory Leak in Linux Kernel USB Gadget for lpc32xx_udc

CVE-2023-53418

What is CVE-2023-53418?

A memory leak vulnerability exists in the Linux kernel USB gadget specifically for lpc32xx_udc. This issue arises when the debugfs_lookup() function is called without the accompanying dput() function, which should be invoked to prevent memory allocation issues. Over time, failure to address this can lead to increased memory usage and potential performance degradation. Developers are advised to use debugfs_lookup_and_remove() instead, as it incorporates necessary logic to manage memory correctly.

References