← CVE Intelligence

CVE-2023-52526

erofs: fix memory leak of LZMA global compressed deduplication PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA EROFS images with the new global compressed deduplication feature enabled (`-Ededupe`), I found some short-lived temporary pages weren't properly released, which could slowly cause unexpected OOMs hours later. Let's fix it now (LZ4 and DEFLATE don't have this issue.)

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 before 6a5a8f0a9740f865693d5aa97a42cc4504538e18; affected 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 before c955751cbf864cf2055117dd3fe7f780d2a57b56; affected 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 before 75a5221630fe5aa3fedba7a06be618db0f79ba1e
Linux / Linuxaffected 6.1; unaffected 0 before 6.1; unaffected 6.1.57 through 6.1.*; unaffected 6.5.7 through 6.5.*; unaffected 6.6 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.