CVE-2023-53410: USB: ULPI: fix memory leak with using debugfs_lookup()
In the Linux kernel, the following vulnerability has been resolved:
USB: ULPI: fix memory leak with using debugfslookup()
When calling debugfslookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove() instead which handles all of the logic at once.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53410?
CVE-2023-53410 is classified as a low-severity vulnerability due to its nature of causing a memory leak.
How do I fix CVE-2023-53410?
To fix CVE-2023-53410, ensure that dput() is called on the results of debugfs_lookup() to prevent memory leaks.
What component is affected by CVE-2023-53410?
CVE-2023-53410 affects the Linux kernel, specifically the USB subsystem's handling of debugfs_lookup().
Is CVE-2023-53410 exploitable remotely?
CVE-2023-53410 is not considered remotely exploitable as it requires specific interactions with the debug file system.
Which versions of the Linux kernel are impacted by CVE-2023-53410?
CVE-2023-53410 affects various versions of the Linux kernel that implement the flawed USB handling functionality.