CVE-2023-54041
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
29/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
io_uring: fix memory leak when removing provided buffers<br />
<br />
When removing provided buffers, io_buffer structs are not being disposed<br />
of, leading to a memory leak. They can&#39;t be freed individually, because<br />
they are allocated in page-sized groups. They need to be added to some<br />
free list instead, such as io_buffers_cache. All callers already hold<br />
the lock protecting it, apart from when destroying buffers, so had to<br />
extend the lock there.



