In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: lpc32xxudc: fix memory leak with using debugfslookup()
When calling debugfslookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove() instead which handles all of the logic at once.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53418.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53418.json"
[
{
"id": "CVE-2023-53418-0697d03a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@036ada6ca9eea926abc0b0ef550b10488d66d4d8",
"target": {
"file": "drivers/usb/gadget/udc/lpc32xx_udc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"188504994327010116973524447240646593557",
"254976968088487951043418488716207870839",
"312412515447658948175395313693277030390",
"158886148468065705023628856405531486212"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2023-53418-4fcc9f3b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a5fdd8660174a8056de57d1fdce3a7e9f77f60e",
"target": {
"file": "drivers/usb/gadget/udc/lpc32xx_udc.c",
"function": "remove_debug_file"
},
"digest": {
"function_hash": "195224376593450456098485092178047594084",
"length": 93.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2023-53418-729f3074",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3965acaf3739fde9d74ad82979b46d37c6c208f",
"target": {
"file": "drivers/usb/gadget/udc/lpc32xx_udc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"188504994327010116973524447240646593557",
"254976968088487951043418488716207870839",
"312412515447658948175395313693277030390",
"158886148468065705023628856405531486212"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2023-53418-971946bf",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@036ada6ca9eea926abc0b0ef550b10488d66d4d8",
"target": {
"file": "drivers/usb/gadget/udc/lpc32xx_udc.c",
"function": "remove_debug_file"
},
"digest": {
"function_hash": "195224376593450456098485092178047594084",
"length": 93.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2023-53418-bf973144",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72c25eb9ae4993ccac4821354ff34eb1f32e4781",
"target": {
"file": "drivers/usb/gadget/udc/lpc32xx_udc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"188504994327010116973524447240646593557",
"254976968088487951043418488716207870839",
"312412515447658948175395313693277030390",
"158886148468065705023628856405531486212"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2023-53418-c2e5b7bd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7a5fdd8660174a8056de57d1fdce3a7e9f77f60e",
"target": {
"file": "drivers/usb/gadget/udc/lpc32xx_udc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"188504994327010116973524447240646593557",
"254976968088487951043418488716207870839",
"312412515447658948175395313693277030390",
"158886148468065705023628856405531486212"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"id": "CVE-2023-53418-d376eef3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72c25eb9ae4993ccac4821354ff34eb1f32e4781",
"target": {
"file": "drivers/usb/gadget/udc/lpc32xx_udc.c",
"function": "remove_debug_file"
},
"digest": {
"function_hash": "195224376593450456098485092178047594084",
"length": 93.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"id": "CVE-2023-53418-ea162052",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3965acaf3739fde9d74ad82979b46d37c6c208f",
"target": {
"file": "drivers/usb/gadget/udc/lpc32xx_udc.c",
"function": "remove_debug_file"
},
"digest": {
"function_hash": "195224376593450456098485092178047594084",
"length": 93.0
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
}
]