CVE-2023-54050

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
24/12/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ubifs: Fix memleak when insert_old_idx() failed<br /> <br /> Following process will cause a memleak for copied up znode:<br /> <br /> dirty_cow_znode<br /> zn = copy_znode(c, znode);<br /> err = insert_old_idx(c, zbr-&gt;lnum, zbr-&gt;offs);<br /> if (unlikely(err))<br /> return ERR_PTR(err); // No one refers to zn.<br /> <br /> Fetch a reproducer in [Link].<br /> <br /> Function copy_znode() is split into 2 parts: resource allocation<br /> and znode replacement, insert_old_idx() is split in similar way,<br /> so resource cleanup could be done in error handling path without<br /> corrupting metadata(mem &amp; disk).<br /> It&amp;#39;s okay that old index inserting is put behind of add_idx_dirt(),<br /> old index is used in layout_leb_in_gaps(), so the two processes do<br /> not depend on each other.

Impact