Riskcovery

CVE-2023-53662

ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}

State
Published
Severity
Not scored
Published
Oct 7, 2025
Updated
May 11, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}

If the filename casefolding fails, we'll be leaking memory from the fscrypt_name struct, namely from the 'crypto_buf.name' member.

Make sure we free it in the error path on both ext4_fname_setup_filename() and ext4_fname_prepare_lookup() functions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1ae98e295fa2577fb5e492200c58d10230e00e99 to before 98fc9c2cc45cfcb56961a73de3ec69b474063fc0Affected
  • 1ae98e295fa2577fb5e492200c58d10230e00e99 to before 1fb3f1bbfdb511034b0360dbeb0f6a8424ed2a5cAffected
  • 1ae98e295fa2577fb5e492200c58d10230e00e99 to before 36daf050be3f6f067631dc52054de2d3b7cc849fAffected
  • 1ae98e295fa2577fb5e492200c58d10230e00e99 to before 7ca4b085f430f3774c3838b3da569ceccd6a0177Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.199 through 5.15.*Not affected
  • 6.1.54 through 6.1.*Not affected
  • 6.5.4 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.