CVE-2023-52526

2024-03-0200:00:00

ubuntu.com

linux

kernel

erofs

vulnerability

memory leak

oom

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

In the Linux kernel, the following vulnerability has been resolved: erofs:
fix memory leak of LZMA global compressed deduplication When stressing
microLZMA EROFS images with the new global compressed deduplication feature
enabled (-Ededupe), I found some short-lived temporary pages weren’t
properly released, which could slowly cause unexpected OOMs hours later.
Let’s fix it now (LZ4 and DEFLATE don’t have this issue.)

OSVersionArchitecturePackageVersionFilename
ubuntu23.10noarchlinux< 6.5.0-17.17UNKNOWN
ubuntu23.10noarchlinux-aws< 6.5.0-1013.13UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< 6.5.0-1013.13~22.04.1UNKNOWN
ubuntu23.10noarchlinux-azure< 6.5.0-1013.13UNKNOWN
ubuntu22.04noarchlinux-azure-6.5< 6.5.0-1013.13~22.04.1UNKNOWN
ubuntu23.10noarchlinux-gcp< 6.5.0-1013.13UNKNOWN
ubuntu22.04noarchlinux-gcp-6.5< 6.5.0-1013.13~22.04.1UNKNOWN
ubuntu24.04noarchlinux-gke< anyUNKNOWN
ubuntu22.04noarchlinux-hwe-6.5< 6.5.0-17.17~22.04.1UNKNOWN
ubuntu24.04noarchlinux-ibm< 6.6.0-1001.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	23.10	noarch	linux	< 6.5.0-17.17	UNKNOWN
ubuntu	23.10	noarch	linux-aws	< 6.5.0-1013.13	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< 6.5.0-1013.13~22.04.1	UNKNOWN
ubuntu	23.10	noarch	linux-azure	< 6.5.0-1013.13	UNKNOWN
ubuntu	22.04	noarch	linux-azure-6.5	< 6.5.0-1013.13~22.04.1	UNKNOWN
ubuntu	23.10	noarch	linux-gcp	< 6.5.0-1013.13	UNKNOWN
ubuntu	22.04	noarch	linux-gcp-6.5	< 6.5.0-1013.13~22.04.1	UNKNOWN
ubuntu	24.04	noarch	linux-gke	< any	UNKNOWN
ubuntu	22.04	noarch	linux-hwe-6.5	< 6.5.0-17.17~22.04.1	UNKNOWN
ubuntu	24.04	noarch	linux-ibm	< 6.6.0-1001.1	UNKNOWN