Memory Leak Issue in Linux Kernel's Thunderbolt Technology

CVE-2023-53527

What is CVE-2023-53527?

A memory leak vulnerability exists in the Linux kernel's Thunderbolt subsystem, specifically within the tb_handle_dp_bandwidth_request function. This issue occurs when memory allocated in tb_queue_dp_bandwidth_request is not released after handling the request. If left unaddressed, this vulnerability could lead to increased memory usage, potentially impacting system performance and stability.

References