CVE - CVE-2023-52698

CVE-ID
CVE-2023-52698	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlbl_calipso_add_pass() If IPv6 support is disabled at boot (ipv6.disable=1), the calipso_init() -> netlbl_calipso_ops_register() function isn't called, and the netlbl_calipso_ops_get() function always returns NULL. In this case, the netlbl_calipso_add_pass() function allocates memory for the doi_def variable but doesn't free it with the calipso_doi_free(). BUG: memory leak unreferenced object 0xffff888011d68180 (size 64): comm "syz-executor.1", pid 10746, jiffies 4295410986 (age 17.928s) hex dump (first 32 bytes): 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<...>] kmalloc include/linux/slab.h:552 [inline] [<...>] netlbl_calipso_add_pass net/netlabel/netlabel_calipso.c:76 [inline] [<...>] netlbl_calipso_add+0x22e/0x4f0 net/netlabel/netlabel_calipso.c:111 [<...>] genl_family_rcv_msg_doit+0x22f/0x330 net/netlink/genetlink.c:739 [<...>] genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] [<...>] genl_rcv_msg+0x341/0x5a0 net/netlink/genetlink.c:800 [<...>] netlink_rcv_skb+0x14d/0x440 net/netlink/af_netlink.c:2515 [<...>] genl_rcv+0x29/0x40 net/netlink/genetlink.c:811 [<...>] netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] [<...>] netlink_unicast+0x54b/0x800 net/netlink/af_netlink.c:1339 [<...>] netlink_sendmsg+0x90a/0xdf0 net/netlink/af_netlink.c:1934 [<...>] sock_sendmsg_nosec net/socket.c:651 [inline] [<...>] sock_sendmsg+0x157/0x190 net/socket.c:671 [<...>] ____sys_sendmsg+0x712/0x870 net/socket.c:2342 [<...>] ___sys_sendmsg+0xf8/0x170 net/socket.c:2396 [<...>] __sys_sendmsg+0xea/0x1b0 net/socket.c:2429 [<...>] do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 [<...>] entry_SYSCALL_64_after_hwframe+0x61/0xc6 Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with Syzkaller [PM: merged via the LSM tree at Jakub Kicinski request]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/321b3a5592c8a9d6b654c7c64833ea67dbb33149 URL:https://git.kernel.org/stable/c/321b3a5592c8a9d6b654c7c64833ea67dbb33149 MISC:https://git.kernel.org/stable/c/36e19f84634aaa94f543fedc0a07588949638d53 URL:https://git.kernel.org/stable/c/36e19f84634aaa94f543fedc0a07588949638d53 MISC:https://git.kernel.org/stable/c/408bbd1e1746fe33e51f4c81c2febd7d3841d031 URL:https://git.kernel.org/stable/c/408bbd1e1746fe33e51f4c81c2febd7d3841d031 MISC:https://git.kernel.org/stable/c/44a88650ba55e6a7f2ec485d2c2413ba7e216f01 URL:https://git.kernel.org/stable/c/44a88650ba55e6a7f2ec485d2c2413ba7e216f01 MISC:https://git.kernel.org/stable/c/9a8f811a146aa2a0230f8edb2e9f4b6609aab8da URL:https://git.kernel.org/stable/c/9a8f811a146aa2a0230f8edb2e9f4b6609aab8da MISC:https://git.kernel.org/stable/c/a4529a08d3704c17ea9c7277d180e46b99250ded URL:https://git.kernel.org/stable/c/a4529a08d3704c17ea9c7277d180e46b99250ded MISC:https://git.kernel.org/stable/c/ec4e9d630a64df500641892f4e259e8149594a99 URL:https://git.kernel.org/stable/c/ec4e9d630a64df500641892f4e259e8149594a99 MISC:https://git.kernel.org/stable/c/f14d36e6e97fe935a20e0ceb159c100f90b6627c URL:https://git.kernel.org/stable/c/f14d36e6e97fe935a20e0ceb159c100f90b6627c MLIST:[debian-lts-announce] 20240625 [SECURITY] [DLA 3841-1] linux-5.10 security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html MLIST:[debian-lts-announce] 20240627 [SECURITY] [DLA 3840-1] linux security update URL:https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
Assigning CNA
kernel.org
Date Record Created
20240307	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240307)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)