
Cloud Vulnerability DB
A community-led vulnerabilities database
In the Linux kernel, a memory leak vulnerability was identified in the dommap() error path within the nommu subsystem. The vulnerability was assigned CVE-2023-52902. The issue stems from the preallocation of maple tree nodes that could potentially leak if the error path to 'errorjust_free' is taken (Kernel Git).
The vulnerability was introduced by commit 8220543df148 ('nommu: remove uses of VMA linked list'). The technical issue involves the maple tree nodes not being properly freed in certain error paths. The fix involves moving the freeing of the maple tree nodes to a shared location that handles all error paths, ensuring proper cleanup (Kernel Git).
The vulnerability results in a memory leak in the Linux kernel's memory management subsystem. While memory leaks can gradually consume system resources, this particular issue occurs only in specific error handling paths (Kernel Git).
The issue has been patched in the Linux kernel. The fix involves adding a mas_destroy(&mas) call in the appropriate error handling path to ensure proper cleanup of maple tree nodes. Users should update their Linux kernel to a version that includes this fix (Kernel Git).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."