Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52526

erofs: fix memory leak of LZMA global compressed deduplication

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA EROFS images with the new global compressed deduplication feature enabled (`-Ededupe`), I found some short-lived temporary pages weren't properly released, which could slowly cause unexpected OOMs hours later. Let's fix it now (LZ4 and DEFLATE don't have this issue.)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 to < 6a5a8f0a9740f865693d5aa97a42cc4504538e18affected
  • 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 to < c955751cbf864cf2055117dd3fe7f780d2a57b56affected
  • 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 to < 75a5221630fe5aa3fedba7a06be618db0f79ba1eaffected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.57 to ≤ 6.1.*unaffected
  • 6.5.7 to ≤ 6.5.*unaffected
  • 6.6 to ≤ *unaffected

References