Memory Leak Vulnerability in Linux Kernel: octeontx2-vf Package
Summary
CVE-2023-53069: In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for alloc_percpu Add the free_percpu for the allocated "vf->hw.lmt_info" in order to avoid memory leak, same as the "pf->... Affects linux versions < 6.1.25-1. Fixed in 6.1.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system. The octeontx2-vf package is part of the Marvell Octeon TX2 family of network interface cards, which are designed for high-performance networking. This package is crucial for managing virtual functions in network devices. However, it has been identified to have a memory leak vulnerability that could lead to resource exhaustion.
Vulnerability Detail
In the Linux kernel, specifically within the octeontx2-vf package, a vulnerability has been identified where the allocated memory for 'vf->hw.lmt_info' is not properly freed. This oversight can lead to a memory leak, causing the system to consume increasing amounts of memory over time, potentially leading to performance degradation or system crashes. The issue arises from the lack of a corresponding free operation for the allocated memory, similar to what is implemented for 'pf->hw.lmt_info' in the related pf.c file.
How To Fix
Minimum fixed version
6.1.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the package.
Conclusion
The CVE-2023-53069 vulnerability in the Linux kernel's octeontx2-vf package poses a significant risk due to its potential to cause memory leaks. It is crucial to update to the patched version to maintain system stability and performance. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2023-53069 is a vulnerability in the Linux kernel's octeontx2-vf package that causes a memory leak due to missing memory deallocation.
This vulnerability can lead to increased memory consumption, potentially causing performance issues or system crashes over time.
Yes, a patch is available in version 6.1.25-1 of the Linux package for Debian 12 and 13.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software without needing to access the code. Visit Vulert Scanner to check your application.
While there are no specific workarounds, it is advisable to monitor system performance closely until the patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
