CVE-2023-53649

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

perf trace: Really free the evsel->priv area

In 3cb4d5e00e037c70 ("perf trace: Free syscall tp fields in

evsel->priv") it only was freeing if strcmp(evsel->tp_format->system,

"syscalls") returned zero, while the corresponding initialization of

evsel->priv was being performed if it was _not_ zero, i.e. if the tp

system wasn't 'syscalls'.

Just stop looking for that and free it if evsel->priv was set, which

should be equivalent.

Also use the pre-existing evsel_trace__delete() function.

This resolves these leaks, detected with:

$ make EXTRA_CFLAGS="-fsanitize=address" BUILD_BPF_SKEL=1 CORESIGHT=1 O=/tmp/build/perf-tools-next -C tools/perf install-bin

=================================================================

==481565==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 40 byte(s) in 1 object(s) allocated from:

#0 0x7f7343cba097 in calloc (/lib64/libasan.so.8+0xba097)

#1 0x987966 in

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References