CVE-2023-52977: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability was discovered in the Linux kernel's OpenVSwitch module, specifically in the ovsflowcmdnew function. The vulnerability was identified by Syzkaller and reported by the Linux Verification Center (linuxtesting.org). The issue occurs when an allocation of a key fails, resulting in newflow not being properly freed (NVD Database).

The vulnerability manifests as a memory leak of an unreferenced object (size 632) in the ovsflowcmdnew() function. The issue occurs in the net/openvswitch module when an allocation of a key fails, leading to the newflow not being properly freed. The bug was detected through memory leak detection tools showing an unreferenced object at address 0xffff888116668000 (NVD Database).

The vulnerability results in a memory leak in the Linux kernel's OpenVSwitch module, which could potentially lead to resource exhaustion over time if repeatedly triggered (NVD Database).

The vulnerability has been fixed by rearranging the goto labels to reflect the order of object allocations and adding appropriate goto statements on the error paths. Users should update their Linux kernel to a version containing this fix (NVD Database).