CVE-2023-54041

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak when removing provided buffers When removing provided buffers, io_buffer structs are not being disposed of, leading to a memory leak. They can't be freed individually, because they are allocated in page-sized groups. They need to be added to some free list instead, such as io_buffers_cache. All callers already hold the lock protecting it, apart from when destroying buffers, so had to extend the lock there.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/ac48787f58d1068f4e06d627c1135784d64b4c72
https://git.kernel.org/stable/c/b4a72c0589fdea6259720375426179888969d6a2
https://git.kernel.org/stable/c/c117c15927772d1624c29c092b6bd3f47c7faa48

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-24 11:15

Updated : 2026-06-17 06:46

NVD link : CVE-2023-54041

Mitre link : CVE-2023-54041

CVE.ORG link : CVE-2023-54041

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-54041", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "cc3cec8367cba76a8ae4c271eba8450f3efc1ba3", "lessThan": "ac48787f58d1068f4e06d627c1135784d64b4c72", "versionType": "git"}, {"status": "affected", "version": "cc3cec8367cba76a8ae4c271eba8450f3efc1ba3", "lessThan": "c117c15927772d1624c29c092b6bd3f47c7faa48", "versionType": "git"}, {"status": "affected", "version": "cc3cec8367cba76a8ae4c271eba8450f3efc1ba3", "lessThan": "b4a72c0589fdea6259720375426179888969d6a2", "versionType": "git"}], "programFiles": ["io_uring/io_uring.c", "io_uring/kbuf.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.18"}, {"status": "unaffected", "version": "0", "lessThan": "5.18", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.24", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.11", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["io_uring/io_uring.c", "io_uring/kbuf.c"], "defaultStatus": "affected"}]}], "published": "2025-12-24T11:15:57.090", "references": [{"url": "https://git.kernel.org/stable/c/ac48787f58d1068f4e06d627c1135784d64b4c72", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b4a72c0589fdea6259720375426179888969d6a2", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c117c15927772d1624c29c092b6bd3f47c7faa48", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix memory leak when removing provided buffers\n\nWhen removing provided buffers, io_buffer structs are not being disposed\nof, leading to a memory leak. They can't be freed individually, because\nthey are allocated in page-sized groups. They need to be added to some\nfree list instead, such as io_buffers_cache. All callers already hold\nthe lock protecting it, apart from when destroying buffers, so had to\nextend the lock there."}], "lastModified": "2026-06-17T06:46:41.870", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}