NONE · 0

CVE-2023-54041

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers, io_buffer structs are not being disposed ...

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers, io_buffer structs are not being disposed of, leading to a memory leak. They can't be freed individually, because they are allocated in page-sized groups. They need to be added to some free list instead, such as io_buffers_cache. All callers already hold the lock protecting it, apart from when destroying buffers, so had to extend the lock there.

References

FAQ

What is CVE-2023-54041?

CVE-2023-54041 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers, io_buffer structs are not being disposed ...

How severe is CVE-2023-54041?

CVSS scoring is not yet available for CVE-2023-54041. Check NVD for updates.

Is there a patch for CVE-2023-54041?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.