CVE-2023-52560

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()

When CONFIG_DAMON_VADDR_KUNIT_TEST=y and making CONFIG_DEBUG_KMEMLEAK=y

and CONFIG_DEBUG_KMEMLEAK_AUTO_SCAN=y, the below memory leak is detected.

Since commit 9f86d624292c ("mm/damon/vaddr-test: remove unnecessary

variables"), the damon_destroy_ctx() is removed, but still call

damon_new_target() and damon_new_region(), the damon_region which is

allocated by kmem_cache_alloc() in damon_new_region() and the damon_target

which is allocated by kmalloc in damon_new_target() are not freed. And

the damon_region which is allocated in damon_new_region() in

damon_set_regions() is also not freed.

So use damon_destroy_target to free all the damon_regions and damon_target.

unreferenced object 0xffff888107c9a940 (size 64):

comm "kunit_try_catch", pid 1069, jiffies 4294670592 (age 732.761s)

hex dump (first 32 bytes):

00 00 00 00

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References