Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-52937

HV: hv_balloon: fix memory leak with using debugfs_lookup()

Description

In the Linux kernel, the following vulnerability has been resolved: HV: hv_balloon: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d180e0a1be6cea2b7436fadbd1c96aecdf3c46c7 to < 0b570a059cf42ad6e2eb632f47c23813d58d8303affected
  • d180e0a1be6cea2b7436fadbd1c96aecdf3c46c7 to < 6dfb0771429a63db8561d44147f2bb76f93e1c86affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.1.11 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References