Memory Leak Vulnerability in Linux Kernel Affecting Multiple Versions

CVE-2023-53518

What is CVE-2023-53518?

A memory leak issue has been identified in the Linux kernel, specifically during the resource allocation phase in the PM/devfreq subsystem. The flaw involves the srcu_init_notifier_head() function, which allocates resources that are not properly released, leading to potential memory exhaustion and degradation of system performance. To address this, the developer must ensure that the srcu_cleanup_notifier_head() function is called to free up the allocated resources. This vulnerability was reported by kmemleak, indicating the necessity for proper memory management in Linux kernel implementations.

References