Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-52526
HistoryMar 02, 2024 - 10:15 p.m.

CVE-2023-52526

2024-03-0222:15:48
Debian Security Bug Tracker
security-tracker.debian.org
5
vulnerability
linux kernel
erofs
memory leak
global compressed deduplication
lzma
oom
microlzma
images
lz4
deflate
unix

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA EROFS images with the new global compressed deduplication feature enabled (-Ededupe), I found some short-lived temporary pages weren’t properly released, which could slowly cause unexpected OOMs hours later. Let’s fix it now (LZ4 and DEFLATE don’t have this issue.)

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%