CVE-2023-53371

The memory pointed to by the fs->any pointer is not freed in the error path of mlx5efsttredirectanycreate, which can lead to a memory leak. Fix by freeing the memory in the error path, thereby making the error path identical to mlx5efsttredirectanydestroy().

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53371.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

0f575c20bf0686caf3d82d6c626c2e1e4a4c36e6

Fixed

75df2fe6d160e16be880aacacd521b135d7177c9

Fixed

8a75a6f169c3df3a94802314aa61282772ac75b8

Fixed

3250affdc658557a41df9c5fb567723e421f8bf2

Affected versions

v5.*

v5.12

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.5

v6.1.6

v6.1.7

v6.1.8

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.4.1

v6.4.2

v6.4.3

v6.4.4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53371.json"

vanir_signatures

[
    {
        "id": "CVE-2023-53371-0fb47bbf",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3250affdc658557a41df9c5fb567723e421f8bf2",
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "130260030156399042793488739531865335341",
            "length": 483.0
        },
        "target": {
            "function": "mlx5e_fs_tt_redirect_any_create",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c"
        }
    },
    {
        "id": "CVE-2023-53371-3479e25b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a75a6f169c3df3a94802314aa61282772ac75b8",
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "130260030156399042793488739531865335341",
            "length": 483.0
        },
        "target": {
            "function": "mlx5e_fs_tt_redirect_any_create",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c"
        }
    },
    {
        "id": "CVE-2023-53371-45d6116d",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@75df2fe6d160e16be880aacacd521b135d7177c9",
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "298381896506715473311659547546738334015",
                "305950016288351947426604352211538523209",
                "68346424629783989730798752100242137757",
                "13083794712809608593713459342353682348",
                "322594333287793068564166789899511672053",
                "198327258699230521144026073922281945766",
                "286331945043148673364712306799113488298",
                "296731878285624102379683846558242167396"
            ]
        },
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c"
        }
    },
    {
        "id": "CVE-2023-53371-bfd3208c",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3250affdc658557a41df9c5fb567723e421f8bf2",
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "298381896506715473311659547546738334015",
                "305950016288351947426604352211538523209",
                "68346424629783989730798752100242137757",
                "13083794712809608593713459342353682348",
                "322594333287793068564166789899511672053",
                "198327258699230521144026073922281945766",
                "286331945043148673364712306799113488298",
                "296731878285624102379683846558242167396"
            ]
        },
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c"
        }
    },
    {
        "id": "CVE-2023-53371-f632f43c",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a75a6f169c3df3a94802314aa61282772ac75b8",
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "298381896506715473311659547546738334015",
                "305950016288351947426604352211538523209",
                "68346424629783989730798752100242137757",
                "13083794712809608593713459342353682348",
                "322594333287793068564166789899511672053",
                "198327258699230521144026073922281945766",
                "286331945043148673364712306799113488298",
                "296731878285624102379683846558242167396"
            ]
        },
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c"
        }
    },
    {
        "id": "CVE-2023-53371-fb04811d",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@75df2fe6d160e16be880aacacd521b135d7177c9",
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "function_hash": "130260030156399042793488739531865335341",
            "length": 483.0
        },
        "target": {
            "function": "mlx5e_fs_tt_redirect_any_create",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/fs_tt_redirect.c"
        }
    }
]

Git / github.com/gregkh/linux