Memory Leak Vulnerability in Linux Kernel Package: linux (Debian 13 & 14)
Summary
DEBIAN-CVE-2023-53303: In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule() Inject fault When select CONFIG_VCAP_KUNIT_TEST, the below memory leak occurs. Affects linux versions < 6.5.6-1. Fixed in 6.5.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'linux' package is a core component of the Debian operating system, providing the Linux kernel that manages system resources and hardware interactions. It is crucial for system stability and performance. This package is widely used across various environments, making its security paramount. The vulnerability in question arises from a memory leak in the net: microchip: vcap API, which can lead to resource exhaustion and potential system instability.
Vulnerability Detail
In the Linux kernel, a memory leak occurs in the vcap_dup_rule() function when the CONFIG_VCAP_KUNIT_TEST is selected. If the kzalloc() function call for duprule succeeds but the subsequent kmemdup() fails, the allocated memory for duprule, ckf, and caf is not freed, leading to a memory leak. This can result in unreferenced objects persisting in memory, which may degrade system performance over time.
How To Fix
Minimum fixed version
6.5.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. However, monitoring system memory usage and applying the patch as soon as it becomes available is advisable.
Conclusion
The memory leak vulnerability in the Linux kernel's vcap API poses a significant risk to system performance and stability. It is essential for users of Debian 13 and 14 to update their 'linux' package to the patched version 6.5.6-1 to mitigate this risk. Regular monitoring and prompt updates are crucial for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a memory leak in the Linux kernel's vcap API, which can lead to resource exhaustion.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
If exploited, this vulnerability can lead to increased memory usage, system instability, and potential crashes.
Yes, a patch is available in version 6.5.6-1 of the linux package. Updating to this version will resolve the issue.
Using Vulert, you can monitor your applications for vulnerabilities in real-time without needing to access the code or installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
