Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2023-52526
HistoryMar 02, 2024 - 10:15 p.m.

CVE-2023-52526

2024-03-0222:15:48
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
1
linux kernel
erofs
memory leak
lzma
global compressed deduplication

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix memory leak of LZMA global compressed deduplication

When stressing microLZMA EROFS images with the new global compressed
deduplication feature enabled (-Ededupe), I found some short-lived
temporary pages weren’t properly released, which could slowly cause
unexpected OOMs hours later.

Let’s fix it now (LZ4 and DEFLATE don’t have this issue.)

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%