CVE-2023-54033
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
29/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps<br />
<br />
The LRU and LRU_PERCPU maps allocate a new element on update before locking the<br />
target hash table bucket. Right after that the maps try to lock the bucket.<br />
If this fails, then maps return -EBUSY to the caller without releasing the<br />
allocated element. This makes the element untracked: it doesn&#39;t belong to<br />
either of free lists, and it doesn&#39;t belong to the hash table, so can&#39;t be<br />
re-used; this eventually leads to the permanent -ENOMEM on LRU map updates,<br />
which is unexpected. Fix this by returning the element to the local free list<br />
if bucket locking fails.



