Memory Leak in Linux Kernel's TCP/UDP Modules Affecting Multiple Versions

CVE-2023-53489

What is CVE-2023-53489?

The Linux kernel has been identified with a vulnerability that causes memory leaks in TCP and UDP modules. This occurs during the process of sending messages with zero-copy socket buffers, where references to socket buffers are not released appropriately, leading to unreferenced memory objects. When a socket configured with timestamp options and zero copy is closed, certain memory references remain unfreed, creating a circular dependency that prevents effective cleanup. These conditions can result in significant resource consumption, impacting system stability and performance.

References