CVE-2023-53271

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/09/2025
Last modified:
16/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()<br /> <br /> There is a memory leaks problem reported by kmemleak:<br /> <br /> unreferenced object 0xffff888102007a00 (size 128):<br /> comm "ubirsvol", pid 32090, jiffies 4298464136 (age 2361.231s)<br /> hex dump (first 32 bytes):<br /> ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................<br /> ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................<br /> backtrace:<br /> [] __kmalloc+0x4d/0x150<br /> [] ubi_eba_create_table+0x76/0x170 [ubi]<br /> [] ubi_resize_volume+0x1be/0xbc0 [ubi]<br /> [] ubi_cdev_ioctl+0x701/0x1850 [ubi]<br /> [] __x64_sys_ioctl+0x11d/0x170<br /> [] do_syscall_64+0x35/0x80<br /> [] entry_SYSCALL_64_after_hwframe+0x46/0xb0<br /> <br /> This is due to a mismatch between create and destroy interfaces, and<br /> in detail that "new_eba_tbl" created by ubi_eba_create_table() but<br /> destroyed by kfree(), while will causing "new_eba_tbl-&gt;entries" not<br /> freed.<br /> <br /> Fix it by replacing kfree(new_eba_tbl) with<br /> ubi_eba_destroy_table(new_eba_tbl)

Impact