CVE-2023-53181
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/09/2025
Last modified:
15/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
dma-buf/dma-resv: Stop leaking on krealloc() failure<br />
<br />
Currently dma_resv_get_fences() will leak the previously<br />
allocated array if the fence iteration got restarted and<br />
the krealloc_array() fails.<br />
<br />
Free the old array by hand, and make sure we still clear<br />
the returned *fences so the caller won&#39;t end up accessing<br />
freed memory. Some (but not all) of the callers of<br />
dma_resv_get_fences() seem to still trawl through the<br />
array even when dma_resv_get_fences() failed. And let&#39;s<br />
zero out *num_fences as well for good measure.