CVE-2023-53355: staging: pi433: fix memory leak with using debugfs_lookup()
In the Linux kernel, the following vulnerability has been resolved:
staging: pi433: fix memory leak with using debugfslookup()
When calling debugfslookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove() instead which handles all of the logic at once. This requires saving off the root directory dentry to make creation of individual device subdirectories easier.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53355?
CVE-2023-53355 is classified as a low severity vulnerability due to its nature involving memory leak management.
How do I fix CVE-2023-53355?
To fix CVE-2023-53355, ensure that dput() is called on the result of debugfs_lookup() to prevent memory leaks.
What systems are affected by CVE-2023-53355?
CVE-2023-53355 affects the Linux kernel, specifically the staging driver for the pi433 module.
What kind of vulnerability is CVE-2023-53355?
CVE-2023-53355 is a memory management vulnerability related to a memory leak due to improper handling of debugfs_lookup().
Is CVE-2023-53355 being actively exploited?
As of now, there is no indication that CVE-2023-53355 is being actively exploited in the wild.