CVE-2023-54171 — Missing Release of Resource after Effective Lifetime in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 92.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix memory leak of iter->temp when reading trace_pipe
kmemleak reports:
unreferenced object 0xffff88814d14e200 (size 256):
comm "cat", pid 336, jiffies 4294871818 (age 779.490s)
hex dump (first 32 bytes):
04 00 01 03 00 00 00 00 08 00 00 00 00 00 00 00 ................
0c d8 c8 9b ff ff ff ff 04 5a ca 9b ff ff ff ff .........Z......
backtrace:
[] __kmalloc+0x4f/0x140
[] trace_find_next_entry+0xbb/0x1d0
[] trace_print_…
Affected Packages4 packages
▶CVEListV5linux/linuxff895103a84abc85a5f43ecabc7f67cf36e1348f — 1a1e793e021d75cd0accd8f329ec9456e5cd105e+5
🔴Vulnerability Details
3GHSA▶
GHSA-rgpm-wqmc-fmj4: In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix memory leak of iter->temp when reading trace_pipe
kmemleak reports:↗2025-12-30
OSV▶
CVE-2023-54171: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak of iter->temp when reading trace_pipe kmemleak reports: u↗2025-12-30