Memory Leak in Linux Kernel's Ext4 File System Repository

CVE-2023-53662

What is CVE-2023-53662?

A memory leak vulnerability exists in the Linux kernel's ext4 file system that occurs during filename casefolding when certain operations fail. Specifically, if the filename casefolding fails, memory allocated for fscrypt_name struct can be leaked from the 'crypto_buf.name' member. Developers should ensure that this memory is appropriately freed during error handling within the ext4_fname_setup_filename() and ext4_fname_prepare_lookup() functions to prevent potential resource depletion.

References