CVE-2023-54050

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ubifs: Fix memleak when insert_old_idx() failed

Following process will cause a memleak for copied up znode:

dirty_cow_znode zn = copy_znode(c, znode); err = insert_old_idx(c, zbr->lnum, zbr->offs); if (unlikely(err)) return ERR_PTR(err); // No one refers to zn.

Fetch a reproducer in [Link].

Function copy_znode() is split into 2 parts: resource allocation and znode replacement, insert_old_idx() is split in similar way, so resource cleanup could be done in error handling path without corrupting metadata(mem & disk). It's okay that old index inserting is put behind of add_idx_dirt(), old index is used in layout_leb_in_gaps(), so the two processes do not depend on each other.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < cc29c7216d7f057eb0613b97dc38c7e1962a88d2; >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < 6f2eee5457bc48b0426dedfd78cdbdea241a6edb; >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < 66e9f2fb3e753f820bec2a98e8c6387029988320; >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < 3ae75f82c33fa1b4ca2006b55c84f4ef4a428d4d; >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < ef9aac603659e9ffe7d69ae16e3f0fc0991a965b; >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < 79079cebbeed624b9d01cfcf1e3254ae1a1f6e14; >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < a6da0ab9847779e05a7416c7a98148b549de69ef; >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < b5fda08ef213352ac2df7447611eb4d383cce929
LinuxLinux2.6.27

References

Timeline

Published
Dec 24, 2025
Last modified
Aug 4, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54051In the Linux kernel, the following vulnerability has been resolved: net: do not allow gso_size to be set to GSO_BY_FRAGS One missing checkCVE-2023-54052In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be drCVE-2023-54053In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possiCVE-2023-54055In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix memory leak of PBLE objects On rmmod of irdma, the PBLCVE-2023-54056In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIG_FORTIFY_SCVE-2023-54057In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line paCVE-2023-54058In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check if ffa_driver remove is present before executiCVE-2023-54059In the Linux kernel, the following vulnerability has been resolved: soc: mediatek: mtk-svs: Enable the IRQ later If the system does not coCVE-2023-54065.9Server communication with a controller can lead to remote code execution using a specially crafted message from the controller. See HoneywelCVE-2023-540608.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Set end correctly when doing batch carry Even though the testCVE-2023-540627.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4_xattr_move_to_block() In ext4_CVE-2023-540637.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix OOB read in indx_insert_into_buffer Syzbot reported a OO
CVE-2023-54050: High severity, CVSS 7.8 | Vulnix