CVE-2023-54050

ubifs: Fix memleak when insert_old_idx() failed

State: Published
Severity: 7.8 High
Published: Dec 24, 2025
Updated: Aug 5, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ubifs: Fix memleak when insert_old_idx() failed

Following process will cause a memleak for copied up znode:

dirty_cow_znode zn = copy_znode(c, znode); err = insert_old_idx(c, zbr->lnum, zbr->offs); if (unlikely(err)) return ERR_PTR(err); // No one refers to zn.

Fetch a reproducer in [Link].

Function copy_znode() is split into 2 parts: resource allocation and znode replacement, insert_old_idx() is split in similar way, so resource cleanup could be done in error handling path without corrupting metadata(mem & disk). It's okay that old index inserting is put behind of add_idx_dirt(), old index is used in layout_leb_in_gaps(), so the two processes do not depend on each other.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before cc29c7216d7f057eb0613b97dc38c7e1962a88d2Affected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 6f2eee5457bc48b0426dedfd78cdbdea241a6edbAffected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 66e9f2fb3e753f820bec2a98e8c6387029988320Affected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 3ae75f82c33fa1b4ca2006b55c84f4ef4a428d4dAffected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before ef9aac603659e9ffe7d69ae16e3f0fc0991a965bAffected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 79079cebbeed624b9d01cfcf1e3254ae1a1f6e14Affected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before a6da0ab9847779e05a7416c7a98148b549de69efAffected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before b5fda08ef213352ac2df7447611eb4d383cce929Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 4.19.283 through 4.19.Not affected 5.4.243 through 5.4.Not affected 5.10.180 through 5.10.Not affected 5.15.111 through 5.15.Not affected 6.1.28 through 6.1.Not affected 6.2.15 through 6.2.Not affected 6.3.2 through 6.3.*Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before cc29c7216d7f057eb0613b97dc38c7e1962a88d2Affected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 6f2eee5457bc48b0426dedfd78cdbdea241a6edbAffected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 66e9f2fb3e753f820bec2a98e8c6387029988320Affected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 3ae75f82c33fa1b4ca2006b55c84f4ef4a428d4dAffected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before ef9aac603659e9ffe7d69ae16e3f0fc0991a965bAffected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 79079cebbeed624b9d01cfcf1e3254ae1a1f6e14Affected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before a6da0ab9847779e05a7416c7a98148b549de69efAffected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before b5fda08ef213352ac2df7447611eb4d383cce929Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
4.19.283 through 4.19.*Not affected
5.4.243 through 5.4.*Not affected
5.10.180 through 5.10.*Not affected
5.15.111 through 5.15.*Not affected
6.1.28 through 6.1.*Not affected
6.2.15 through 6.2.*Not affected
6.3.2 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.