← Back to CVEs

CVE-2023-52526

MEDIUM

5.5

Description

In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA EROFS images with the new global compressed deduplication feature enabled (`-Ededupe`), I found some short-lived temporary pages weren't properly released, which could slowly cause unexpected OOMs hours later. Let's fix it now (LZ4 and DEFLATE don't have this issue.)

CVE Details

CVSS v3.1 Score5.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published3/2/2024

Last Modified12/11/2024

Sourcenvd

Honeypot Sightings0

Affected Products

linux:linux_kernel

Weaknesses (CWE)

CWE-401

References

https://git.kernel.org/stable/c/6a5a8f0a9740f865693d5aa97a42cc4504538e18(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/75a5221630fe5aa3fedba7a06be618db0f79ba1e(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/c955751cbf864cf2055117dd3fe7f780d2a57b56(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/6a5a8f0a9740f865693d5aa97a42cc4504538e18(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/75a5221630fe5aa3fedba7a06be618db0f79ba1e(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/c955751cbf864cf2055117dd3fe7f780d2a57b56(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.