CVE-2023-53241

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where the op release function is not consistently called, even when op func returns an error. This can lead to a memory leak in the layoutget codepath, specifically within the Network File System (NFS) daemon (nfsd) when handling operations with "trivial" replies. The nfsd4 encode operation function skips calling op release under certain conditions, causing the memory leak. Additionally, nfsd4 block get device info scsi needs to set the gd device pointer to NULL on error to prevent a double free.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.