CVE-2023-54050

CVE-2023-54050

High · published December 24, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ubifs: Fix memleak when insert_old_idx() failed

Following process will cause a memleak for copied up znode:

dirty_cow_znode

zn = copy_znode(c, znode);

err = insert_old_idx(c, zbr->lnum, zbr->offs);

if (unlikely(err))

return ERR_PTR(err); // No one refers to zn.

Fetch a reproducer in [Link].

Function copy_znode() is split into 2 parts: resource allocation

and znode replacement, insert_old_idx() is split in similar way,

so resource cleanup could be done in error handling path without

corrupting metadata(mem & disk).

It's okay that old index inserting is put behind of add_idx_dirt(),

old index is used in layout_leb_in_gaps(), so the two processes do

not depend on each other.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Published
2025-12-24T18:16Z
References (8)
EPSS history
Timeline
  • 24 DEC 12:23Z
    ubifs: Fix memleak when insert_old_idx() failed
    cvelistv5