CVE-2023-54050

ubifs: Fix memleak when insert_old_idx() failed

HIGH
7.8
CVSS Score
Published: December 24, 2025 at 12:23 PM UTC
Updated: August 5, 2026 at 10:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memleak when insert_old_idx() failed Following process will cause a memleak for copied up znode: dirty_cow_znode zn = copy_znode(c, znode); err = insert_old_idx(c, zbr->lnum, zbr->offs); if (unlikely(err)) return ERR_PTR(err); // No one refers to zn. Fetch a reproducer in [Link]. Function copy_znode() is split into 2 parts: resource allocation and znode replacement, insert_old_idx() is split in similar way, so resource cleanup could be done in error handling path without corrupting metadata(mem & disk). It's okay that old index inserting is put behind of add_idx_dirt(), old index is used in layout_leb_in_gaps(), so the two processes do not depend on each other.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.27 ≤ v < 4.19.2832.6.27 ≤ v < 5.10.1802.6.27 ≤ v < 5.15.1112.6.27 ≤ v < 5.4.2432.6.27 ≤ v < 6.1.282.6.27 ≤ v < 6.2.152.6.27 ≤ v < 6.3.22.6.27 ≤ v < 6.41e51764a3c2ac05a23a22b2a95ddee4d9bffb16d2.6.27
Vendor states this is fixed in 3ae75f82c33fa1b4ca2006b55c84f4ef4a428d4d (fixed)
Vendor states this is fixed in 66e9f2fb3e753f820bec2a98e8c6387029988320 (fixed)
Vendor states this is fixed in 6f2eee5457bc48b0426dedfd78cdbdea241a6edb (fixed)
Vendor states this is fixed in 79079cebbeed624b9d01cfcf1e3254ae1a1f6e14 (fixed)
Vendor states this is fixed in a6da0ab9847779e05a7416c7a98148b549de69ef (fixed)
Vendor states this is fixed in b5fda08ef213352ac2df7447611eb4d383cce929 (fixed)
Vendor states this is fixed in cc29c7216d7f057eb0613b97dc38c7e1962a88d2 (fixed)
Vendor states this is fixed in ef9aac603659e9ffe7d69ae16e3f0fc0991a965b (fixed)
Vendor states this is fixed in 2.6.27 (unaffected)
Vendor states this is fixed in 4.19.283 (unaffected)
Vendor states this is fixed in 5.10.180 (unaffected)
Vendor states this is fixed in 5.15.111 (unaffected)
Vendor states this is fixed in 5.4.243 (unaffected)
Vendor states this is fixed in 6.1.28 (unaffected)
Vendor states this is fixed in 6.2.15 (unaffected)
Vendor states this is fixed in 6.3.2 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card