https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:55:03 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53271 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()</p> <p>There is a memory leaks problem reported by kmemleak:</p> <p>unreferenced object 0xffff888102007a00 (size 128): comm &#34;ubirsvol&#34;, pid 32090, jiffies 4298464136 (age 2361.231s) hex dump (first 32 bytes): ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace: [&lt;ffffffff8176cecd&gt;] __kmalloc+0x4d/0x150 [&lt;ffffffffa02a9a36&gt;] ubi_eba_create_table+0x76/0x170 [ubi] [&lt;ffffffffa029764e&gt;] ubi_resize_volume+0x1be/0xbc0 [ubi] [&lt;ffffffffa02a3321&gt;] ubi_cdev_ioctl+0x701/0x1850 [ubi] [&lt;ffffffff81975d2d&gt;] __x64_sys_ioctl+0x11d/0x170 [&lt;ffffffff83c142a5&gt;] do_syscall_64+0x35/0x80 [&lt;ffffffff83e0006a&gt;] entry_SYSCALL_64_after_hwframe+0x46/0xb0</p> <p>This is due to a mismatch between create and destroy interfaces, and in detail that &#34;new_eba_tbl&#34; created by ubi_eba_create_table() but destroyed by kfree(), while will causing &#34;new_eba_tbl-&gt;entries&#34; not freed.</p> <p>Fix it by replacing kfree(new_eba_tbl) with ubi_eba_destroy_table(new_eba_tbl)</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()</p> <p>There is a memory leaks problem reported by kmemleak:</p> <p>unreferenced object 0xffff888102007a00 (size 128): comm &#34;ubirsvol&#34;, pid 32090, jiffies 4298464136 (age 2361.231s) hex dump (first 32 bytes): ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace: [&lt;ffffffff8176cecd&gt;] __kmalloc+0x4d/0x150 [&lt;ffffffffa02a9a36&gt;] ubi_eba_create_table+0x76/0x170 [ubi] [&lt;ffffffffa029764e&gt;] ubi_resize_volume+0x1be/0xbc0 [ubi] [&lt;ffffffffa02a3321&gt;] ubi_cdev_ioctl+0x701/0x1850 [ubi] [&lt;ffffffff81975d2d&gt;] __x64_sys_ioctl+0x11d/0x170 [&lt;ffffffff83c142a5&gt;] do_syscall_64+0x35/0x80 [&lt;ffffffff83e0006a&gt;] entry_SYSCALL_64_after_hwframe+0x46/0xb0</p> <p>This is due to a mismatch between create and destroy interfaces, and in detail that &#34;new_eba_tbl&#34; created by ubi_eba_create_table() but destroyed by kfree(), while will causing &#34;new_eba_tbl-&gt;entries&#34; not freed.</p> <p>Fix it by replacing kfree(new_eba_tbl) with ubi_eba_destroy_table(new_eba_tbl)</p> https://vulnerability.circl.lu/vuln/cve-2023-53271