CVE-2023-54020 — Missing Release of Memory after Effective Lifetime in Linux
7 documents6 sources
Severity
—N/A
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: sf-pdma: pdma_desc memory leak fix
Commit b2cc5c465c2c ("dmaengine: sf-pdma: Add multithread support for a
DMA channel") changed sf_pdma_prep_dma_memcpy() to unconditionally
allocate a new sf_pdma_desc each time it is called.
The driver previously recycled descs, by checking the in_use flag, only
allocating additional descs if the existing one was in use. This logic
was removed in commit b2cc5c465c2c ("dmaengine: s…
Affected Packages4 packages
▶CVEListV5linux/linux5ab2782c944e324008ef5d658f2494a9f0e3c5ac — ad222c9af25e3f074c180e389b3477dce42afc4f+7
🔴Vulnerability Details
3OSV▶
CVE-2023-54020: In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: pdma_desc memory leak fix Commit b2cc5c465c2c ("dmaengine: sf-↗2025-12-24
GHSA▶
GHSA-4cm4-vw36-jc7r: In the Linux kernel, the following vulnerability has been resolved:
dmaengine: sf-pdma: pdma_desc memory leak fix
Commit b2cc5c465c2c ("dmaengine: s↗2025-12-24