Strix
26.1K

CVE-2023-54005

UnknownEPSS 0.18%

Last modified

CVE-2023-54005 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binder_init() In binder_init(), the destruction of binder_alloc_shrinker_init() is not performed in the wrong path, which will cause memory leaks. So this commit introduces binder_alloc_shrinker_exit() and calls it in the wrong path to fix that.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binder_init() In binder_init(), the destruction of binder_alloc_shrinker_init() is not performed in the wrong path, which will cause memory leaks. So this commit introduces binder_alloc_shrinker_exit() and calls it in the wrong path to fix that.

Metrics

EPSS Probability
0.18%

7.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f2517eb76f1f2f7f89761f9db2b202e89931738c, < 486dd742ba186ea333664c517d6775b06b1448ca; >= f2517eb76f1f2f7f89761f9db2b202e89931738c, < ceb0f8cc987fb3d25c06b9662e08a42f99651207; >= f2517eb76f1f2f7f89761f9db2b202e89931738c, < b97dad01c12169991f895de3d4f61b8115d12bab; >= f2517eb76f1f2f7f89761f9db2b202e89931738c, < d7e5e2b87f5d27469075b6326b6b358e38cd9dcb; >= f2517eb76f1f2f7f89761f9db2b202e89931738c, < 03eebad96233397f951d8e9fafd82a1674a77284; >= f2517eb76f1f2f7f89761f9db2b202e89931738c, < f11a26633eb6d3bb24a10b1bacc4e4a9b0c6389f; >= f2517eb76f1f2f7f89761f9db2b202e89931738c, < ee95051c0c1928051f86198bf5e554277a53b26b; >= f2517eb76f1f2f7f89761f9db2b202e89931738c, < adb9743d6a08778b78d62d16b4230346d3508986
LinuxLinux4.14

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2023-54005?
In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binder_init() In binder_init(), the destruction of binder_alloc_shrinker_init() is not performed in the wrong path, which will cause memory leaks. So this commit introduces binder_alloc_shrinker_exit() and calls it in the wrong path to fix that.
How severe is CVE-2023-54005?
Severity scoring for CVE-2023-54005 is pending analysis. The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2023-54005?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-54005?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST