CVE-2023-54050

Linux Kernel - Memory Leak in UBIFS via Failed insert_old_idx()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memleak when insert_old_idx() failed Following process will cause a memleak for copied up znode: dirty_cow_znode zn = copy_znode(c, znode); err = insert_old_idx(c, zbr->lnum, zbr->offs); if (unlikely(err)) return ERR_PTR(err); // No one refers to zn. Fetch a reproducer in [Link]. Function copy_znode() is split into 2 parts: resource allocation and znode replacement, insert_old_idx() is split in similar way, so resource cleanup could be done in error handling path without corrupting metadata(mem & disk). It's okay that old index inserting is put behind of add_idx_dirt(), old index is used in layout_leb_in_gaps(), so the two processes do not depend on each other.

Scores

EPSS 0.0022
EPSS Percentile 13.3%

Details

Status published
Products (25)
linux/Kernel 2.6.27 - 4.19.283linux
linux/Kernel 4.20.0 - 5.4.243linux
linux/Kernel 5.11.0 - 5.15.111linux
linux/Kernel 5.16.0 - 6.1.28linux
linux/Kernel 5.5.0 - 5.10.180linux
linux/Kernel 6.2.0 - 6.2.15linux
linux/Kernel 6.3.0 - 6.3.2linux
Linux/Linux < 2.6.27
Linux/Linux 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d - 3ae75f82c33fa1b4ca2006b55c84f4ef4a428d4d
Linux/Linux 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d - 66e9f2fb3e753f820bec2a98e8c6387029988320
... and 15 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026