CVE-2023-54134: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54134 is a memory leak vulnerability in the Linux kernel's autofs (automatic filesystem) module, specifically in the autofs_catatonic_mode function's handling of wait queues. When the autofs mount enters catatonic mode, autofs_wait_queue structures are not properly freed when their reference counter (wait_ctr) reaches zero, leading to gradual memory exhaustion. The vulnerability was discovered via Syzkaller fuzzing and publicly disclosed on December 24, 2025. It affects the Linux kernel and has a CVSS v3.1 base score of 5.5 (Medium), requiring only local low-privileged access to exploit (Red Hat Advisory, Red Hat Bugzilla).

The root cause is a missing memory deallocation (CWE-401: Missing Release of Memory after Effective Lifetime) in fs/autofs/waitq.c. When AUTOFS_IOC_EXPIRE_MULTI ioctl is issued, a new autofs_wait_queue struct is allocated in autofs_wait() with an initial wait_ctr of 2. If wait_event_killable() is interrupted (returning -ERESTARTSYS), the counter is decremented to 1 on exit from autofs_wait(). When the automount daemon exits abruptly and autofs_catatonic_mode() is subsequently called, it only decrements wait_ctr to zero without freeing the structure, causing the memory leak. The fix ensures that wait queue structures are freed when their counter reaches zero within autofs_catatonic_mode() (Red Hat Bugzilla).

Successful exploitation allows a local low-privileged attacker to cause a denial of service by repeatedly triggering the memory leak, gradually exhausting kernel memory and potentially rendering the system unresponsive or causing resource depletion. There is no confidentiality or integrity impact; the vulnerability is limited to availability. Systems heavily utilizing autofs (e.g., NFS automounting environments) are at greater risk of noticeable degradation (Red Hat Advisory, Red Hat Bugzilla).

The primary remediation is to update to a patched Linux kernel version that includes the fix for autofs_catatonic_mode wait queue memory management. Patches have been committed to the stable kernel tree (referenced in multiple stable branch commits). As interim mitigations, administrators should monitor system memory usage on systems using autofs, restrict local user access where possible, and consider periodic service restarts or system reboots to clear accumulated leaked memory. Red Hat has tracked this issue with low severity (Red Hat Bugzilla, Red Hat Advisory).