185 lines
9.0 KiB
JSON
185 lines
9.0 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2023-54171",
|
|
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "Linux",
|
|
"dateReserved": "2025-12-30T12:06:44.496Z",
|
|
"datePublished": "2025-12-30T12:08:45.441Z",
|
|
"dateUpdated": "2026-05-11T19:56:49.388Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"providerMetadata": {
|
|
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
|
"shortName": "Linux",
|
|
"dateUpdated": "2026-05-11T19:56:49.388Z"
|
|
},
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix memory leak of iter->temp when reading trace_pipe\n\nkmemleak reports:\n unreferenced object 0xffff88814d14e200 (size 256):\n comm \"cat\", pid 336, jiffies 4294871818 (age 779.490s)\n hex dump (first 32 bytes):\n 04 00 01 03 00 00 00 00 08 00 00 00 00 00 00 00 ................\n 0c d8 c8 9b ff ff ff ff 04 5a ca 9b ff ff ff ff .........Z......\n backtrace:\n [<ffffffff9bdff18f>] __kmalloc+0x4f/0x140\n [<ffffffff9bc9238b>] trace_find_next_entry+0xbb/0x1d0\n [<ffffffff9bc9caef>] trace_print_lat_context+0xaf/0x4e0\n [<ffffffff9bc94490>] print_trace_line+0x3e0/0x950\n [<ffffffff9bc95499>] tracing_read_pipe+0x2d9/0x5a0\n [<ffffffff9bf03a43>] vfs_read+0x143/0x520\n [<ffffffff9bf04c2d>] ksys_read+0xbd/0x160\n [<ffffffff9d0f0edf>] do_syscall_64+0x3f/0x90\n [<ffffffff9d2000aa>] entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\nwhen reading file 'trace_pipe', 'iter->temp' is allocated or relocated\nin trace_find_next_entry() but not freed before 'trace_pipe' is closed.\n\nTo fix it, free 'iter->temp' in tracing_release_pipe()."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"product": "Linux",
|
|
"vendor": "Linux",
|
|
"defaultStatus": "unaffected",
|
|
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
|
|
"programFiles": [
|
|
"kernel/trace/trace.c"
|
|
],
|
|
"versions": [
|
|
{
|
|
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
|
|
"lessThan": "1a1e793e021d75cd0accd8f329ec9456e5cd105e",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
|
|
"lessThan": "954792db9f61b6c0b8a94b8831fed5f146014029",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
|
|
"lessThan": "be970e22c53d5572b2795b79da9716ada937023b",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
|
|
"lessThan": "3f42d57a76e7e96585f08855554e002218cbca0c",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
},
|
|
{
|
|
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
|
|
"lessThan": "d5a821896360cc8b93a15bd888fabc858c038dc0",
|
|
"status": "affected",
|
|
"versionType": "git"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "Linux",
|
|
"vendor": "Linux",
|
|
"defaultStatus": "affected",
|
|
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
|
|
"programFiles": [
|
|
"kernel/trace/trace.c"
|
|
],
|
|
"versions": [
|
|
{
|
|
"version": "5.7",
|
|
"status": "affected"
|
|
},
|
|
{
|
|
"version": "0",
|
|
"lessThan": "5.7",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "5.10.188",
|
|
"lessThanOrEqual": "5.10.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "5.15.121",
|
|
"lessThanOrEqual": "5.15.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.1.40",
|
|
"lessThanOrEqual": "6.1.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.4.5",
|
|
"lessThanOrEqual": "6.4.*",
|
|
"status": "unaffected",
|
|
"versionType": "semver"
|
|
},
|
|
{
|
|
"version": "6.5",
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"versionType": "original_commit_for_fix"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"cpeApplicability": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.7",
|
|
"versionEndExcluding": "5.10.188"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.7",
|
|
"versionEndExcluding": "5.15.121"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.7",
|
|
"versionEndExcluding": "6.1.40"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.7",
|
|
"versionEndExcluding": "6.4.5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "5.7",
|
|
"versionEndExcluding": "6.5"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/1a1e793e021d75cd0accd8f329ec9456e5cd105e"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/954792db9f61b6c0b8a94b8831fed5f146014029"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/be970e22c53d5572b2795b79da9716ada937023b"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/3f42d57a76e7e96585f08855554e002218cbca0c"
|
|
},
|
|
{
|
|
"url": "https://git.kernel.org/stable/c/d5a821896360cc8b93a15bd888fabc858c038dc0"
|
|
}
|
|
],
|
|
"title": "tracing: Fix memory leak of iter->temp when reading trace_pipe",
|
|
"x_generator": {
|
|
"engine": "bippy-1.2.0"
|
|
}
|
|
}
|
|
}
|
|
} |