CVE-2023-54171

Source
https://cve.org/CVERecord?id=CVE-2023-54171
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54171.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-54171
Downstream
Related
Published
2025-12-30T12:08:45.441Z
Modified
2026-03-31T17:29:50.575186350Z
Summary
tracing: Fix memory leak of iter->temp when reading trace_pipe
Details

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix memory leak of iter->temp when reading trace_pipe

kmemleak reports: unreferenced object 0xffff88814d14e200 (size 256): comm "cat", pid 336, jiffies 4294871818 (age 779.490s) hex dump (first 32 bytes): 04 00 01 03 00 00 00 00 08 00 00 00 00 00 00 00 ................ 0c d8 c8 9b ff ff ff ff 04 5a ca 9b ff ff ff ff .........Z...... backtrace: [<ffffffff9bdff18f>] __kmalloc+0x4f/0x140 [<ffffffff9bc9238b>] tracefindnextentry+0xbb/0x1d0 [<ffffffff9bc9caef>] traceprintlatcontext+0xaf/0x4e0 [<ffffffff9bc94490>] printtraceline+0x3e0/0x950 [<ffffffff9bc95499>] tracingreadpipe+0x2d9/0x5a0 [<ffffffff9bf03a43>] vfsread+0x143/0x520 [<ffffffff9bf04c2d>] ksysread+0xbd/0x160 [<ffffffff9d0f0edf>] dosyscall64+0x3f/0x90 [<ffffffff9d2000aa>] entrySYSCALL64afterhwframe+0x6e/0xd8

when reading file 'tracepipe', 'iter->temp' is allocated or relocated in tracefindnextentry() but not freed before 'trace_pipe' is closed.

To fix it, free 'iter->temp' in tracingreleasepipe().

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54171.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ff895103a84abc85a5f43ecabc7f67cf36e1348f
Fixed
1a1e793e021d75cd0accd8f329ec9456e5cd105e
Fixed
954792db9f61b6c0b8a94b8831fed5f146014029
Fixed
be970e22c53d5572b2795b79da9716ada937023b
Fixed
3f42d57a76e7e96585f08855554e002218cbca0c
Fixed
d5a821896360cc8b93a15bd888fabc858c038dc0

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54171.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.7.0
Fixed
5.10.188
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.121
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.40
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.4.5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54171.json"