CVE-2023-54033

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
29/12/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps<br /> <br /> The LRU and LRU_PERCPU maps allocate a new element on update before locking the<br /> target hash table bucket. Right after that the maps try to lock the bucket.<br /> If this fails, then maps return -EBUSY to the caller without releasing the<br /> allocated element. This makes the element untracked: it doesn&amp;#39;t belong to<br /> either of free lists, and it doesn&amp;#39;t belong to the hash table, so can&amp;#39;t be<br /> re-used; this eventually leads to the permanent -ENOMEM on LRU map updates,<br /> which is unexpected. Fix this by returning the element to the local free list<br /> if bucket locking fails.

Impact