CVE-2023-53271

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()

There is a memory leaks problem reported by kmemleak:

unreferenced object 0xffff888102007a00 (size 128):

comm "ubirsvol", pid 32090, jiffies 4298464136 (age 2361.231s)

hex dump (first 32 bytes):

ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................

ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................

backtrace:

[<ffffffff8176cecd>] __kmalloc+0x4d/0x150

[<ffffffffa02a9a36>] ubi_eba_create_table+0x76/0x170 [ubi]

[<ffffffffa029764e>] ubi_resize_volume+0x1be/0xbc0 [ubi]

[<ffffffffa02a3321>] ubi_cdev_ioctl+0x701/0x1850 [ubi]

[<ffffffff81975d2d>] __x64_sys_ioctl+0x11d/0x170

[<ffffffff83c142a5>] do_syscall_64+0x35/0x80

[<ffffffff83e0006a>] entry_SYSCALL_64_after_hwframe+0x46/0xb0

This is due to a mismatch between create and destroy interfaces, and

in detail that "new_eba_tbl" created by ubi_eba_create_table() but

destro

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References