PT-2025-41093 · Linux+3 · Linux Kernel+3
Published
2022-05-10
·
Updated
2025-11-28
·
CVE-2023-53649
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a memory leak in the perf trace functionality. Specifically, the
evsel->priv area was not consistently freed, leading to memory leaks detected during testing with AddressSanitizer. The issue stemmed from incorrect conditional freeing logic in the evsel trace new and related functions, such as evsel syscall tp and evsel init raw syscall tp. The fix ensures that evsel->priv is freed when it is set, regardless of the tp system value. The leak was identified during testing with perf trace sleep 1.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat
Suse