Riskcovery

CVE-2023-52526

erofs: fix memory leak of LZMA global compressed deduplication

State
Published
Severity
Not scored
Published
Mar 2, 2024
Updated
May 11, 2026
Reserved
Feb 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix memory leak of LZMA global compressed deduplication

When stressing microLZMA EROFS images with the new global compressed deduplication feature enabled (`-Ededupe`), I found some short-lived temporary pages weren't properly released, which could slowly cause unexpected OOMs hours later.

Let's fix it now (LZ4 and DEFLATE don't have this issue.)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 to before 6a5a8f0a9740f865693d5aa97a42cc4504538e18Affected
  • 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 to before c955751cbf864cf2055117dd3fe7f780d2a57b56Affected
  • 5c2a64252c5dc4cfe78e5b2a531c118894e3d155 to before 75a5221630fe5aa3fedba7a06be618db0f79ba1eAffected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.57 through 6.1.*Not affected
  • 6.5.7 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.