Memory Leak Vulnerability in Linux Kernel: Debian Packages Affected
Summary
DEBIAN-CVE-2023-53266: In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Fix possible memory leak of ffh_ctxt Allocated 'ffh_ctxt' memory leak is possible if the SMCCC version and conduit checks fail and -EOPNOTS... Affects linux versions < 6.3.7-1. Fixed in 6.3.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system and is critical for system stability and performance. The kernel is continuously updated to fix bugs and vulnerabilities, ensuring security and efficiency.
Vulnerability Detail
In the Linux kernel, a memory leak vulnerability has been identified related to the arm64 ACPI subsystem. Specifically, if the SMCCC version and conduit checks fail, the allocated 'ffh_ctxt' memory is not freed when an error code (-EOPNOTSUPP) is returned. This can lead to unnecessary memory consumption, potentially degrading system performance and stability over time.
How To Fix
Minimum fixed version
6.3.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. The best course of action is to apply the patch by updating the kernel package as mentioned above.
Conclusion
The memory leak vulnerability in the Linux kernel poses a risk to system performance and stability. Users are encouraged to update their kernel packages to the latest patched version to mitigate this risk. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
It is a memory leak vulnerability in the Linux kernel's arm64 ACPI subsystem.
If exploited, it can lead to increased memory usage, potentially affecting system performance and stability.
Yes, the vulnerability has been patched in version 6.3.7-1 of the Linux kernel.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software.
While there are no specific workarounds, it is recommended to prioritize updating to the patched version as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
