CVE-2023-53670: nvme-core: fix dev_pm_qos memleak
In the Linux kernel, the following vulnerability has been resolved:
nvme-core: fix devpmqos memleak
Call devpmqoshidelatencytolerance() in the error unwind patch to avoid following kmemleak:-
blktests (master) # kmemleak-clear; ./check nvme/044; blktests (master) # kmemleak-scan ; kmemleak-show nvme/044 (Test bi-directional authentication) [passed] runtime 2.111s ... 2.124s unreferenced object 0xffff888110c46240 (size 96): comm "nvme", pid 33461, jiffies 4345365353 (age 75.586s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000069ac2cec>] kmalloctrace+0x25/0x90 [<000000006acc66d5>] devpmqosupdateuserlatencytolerance+0x6f/0x100 [<00000000cc376ea7>] nvmeinitctrl+0x38e/0x410 [nvmecore] [<000000007df61b4b>] 0xffffffffc05e88b3 [<00000000d152b985>] 0xffffffffc05744cb [<00000000f04a4041>] vfswrite+0xc5/0x3c0 [<00000000f9491baf>] ksyswrite+0x5f/0xe0 [<000000001c46513d>] dosyscall64+0x3b/0x90 [<00000000ecf348fe>] entrySYSCALL64afterhwframe+0x72/0xdc
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53670?
CVE-2023-53670 has been classified with a severity rating of moderate due to the nature of the bug in the Linux kernel.
How do I fix CVE-2023-53670?
To fix CVE-2023-53670, update the Linux kernel to the latest version where this vulnerability has been resolved.
What is the main issue addressed in CVE-2023-53670?
CVE-2023-53670 addresses a memory leak in the nvme-core subsystem due to improper handling of device quality of service.
What versions of the Linux kernel are affected by CVE-2023-53670?
CVE-2023-53670 affects several versions of the Linux kernel prior to the fix being applied in the latest stable releases.
Can CVE-2023-53670 lead to further vulnerabilities?
Yes, if left unpatched, CVE-2023-53670 could potentially be exploited to create instability in system performance and lead to denial-of-service scenarios.