CVE-2023-54171
Estado: AplazadaSin puntuar—
In the Linux kernel, the following vulnerability has been resolved:
tracing: Fix memory leak of iter->temp when reading trace_pipe
when reading file 'trace_pipe', 'iter->temp' is allocated or relocated in trace_find_next_entry() but not freed before 'trace_pipe' is closed.
To fix it, free 'iter->temp' in tracing_release_pipe().
Detalles técnicos trazas, registros y código del informe original
kmemleak reports:
unreferenced object 0xffff88814d14e200 (size 256):
comm "cat", pid 336, jiffies 4294871818 (age 779.490s)
hex dump (first 32 bytes):
04 00 01 03 00 00 00 00 08 00 00 00 00 00 00 00 ................
0c d8 c8 9b ff ff ff ff 04 5a ca 9b ff ff ff ff .........Z......
backtrace:
[<ffffffff9bdff18f>] __kmalloc+0x4f/0x140
[<ffffffff9bc9238b>] trace_find_next_entry+0xbb/0x1d0
[<ffffffff9bc9caef>] trace_print_lat_context+0xaf/0x4e0
[<ffffffff9bc94490>] print_trace_line+0x3e0/0x950
[<ffffffff9bc95499>] tracing_read_pipe+0x2d9/0x5a0
[<ffffffff9bf03a43>] vfs_read+0x143/0x520
[<ffffffff9bf04c2d>] ksys_read+0xbd/0x160
[<ffffffff9d0f0edf>] do_syscall_64+0x3f/0x90
[<ffffffff9d2000aa>] entry_SYSCALL_64_after_hwframe+0x6e/0xd8CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.20%
- Percentil entre todas las CVEs puntuadas: 9
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
- https://git.kernel.org/stable/c/1a1e793e021d75cd0accd8f329ec9456e5cd105e
- https://git.kernel.org/stable/c/3f42d57a76e7e96585f08855554e002218cbca0c
- https://git.kernel.org/stable/c/954792db9f61b6c0b8a94b8831fed5f146014029
- https://git.kernel.org/stable/c/be970e22c53d5572b2795b79da9716ada937023b
- https://git.kernel.org/stable/c/d5a821896360cc8b93a15bd888fabc858c038dc0
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-54171",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
"lessThan": "1a1e793e021d75cd0accd8f329ec9456e5cd105e",
"versionType": "git"
},
{
"status": "affected",
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
"lessThan": "954792db9f61b6c0b8a94b8831fed5f146014029",
"versionType": "git"
},
{
"status": "affected",
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
"lessThan": "be970e22c53d5572b2795b79da9716ada937023b",
"versionType": "git"
},
{
"status": "affected",
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
"lessThan": "3f42d57a76e7e96585f08855554e002218cbca0c",
"versionType": "git"
},
{
"status": "affected",
"version": "ff895103a84abc85a5f43ecabc7f67cf36e1348f",
"lessThan": "d5a821896360cc8b93a15bd888fabc858c038dc0",
"versionType": "git"
}
],
"programFiles": [
"kernel/trace/trace.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.7"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.7",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.188",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.121",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.40",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.4.5",
"versionType": "semver",
"lessThanOrEqual": "6.4.*"
},
{
"status": "unaffected",
"version": "6.5",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"kernel/trace/trace.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2025-12-30T13:16:04.940",
"references": [
{
"url": "https://git.kernel.org/stable/c/1a1e793e021d75cd0accd8f329ec9456e5cd105e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/3f42d57a76e7e96585f08855554e002218cbca0c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/954792db9f61b6c0b8a94b8831fed5f146014029",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/be970e22c53d5572b2795b79da9716ada937023b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d5a821896360cc8b93a15bd888fabc858c038dc0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Deferred",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Fix memory leak of iter->temp when reading trace_pipe\n\nkmemleak reports:\n unreferenced object 0xffff88814d14e200 (size 256):\n comm \"cat\", pid 336, jiffies 4294871818 (age 779.490s)\n hex dump (first 32 bytes):\n 04 00 01 03 00 00 00 00 08 00 00 00 00 00 00 00 ................\n 0c d8 c8 9b ff ff ff ff 04 5a ca 9b ff ff ff ff .........Z......\n backtrace:\n [<ffffffff9bdff18f>] __kmalloc+0x4f/0x140\n [<ffffffff9bc9238b>] trace_find_next_entry+0xbb/0x1d0\n [<ffffffff9bc9caef>] trace_print_lat_context+0xaf/0x4e0\n [<ffffffff9bc94490>] print_trace_line+0x3e0/0x950\n [<ffffffff9bc95499>] tracing_read_pipe+0x2d9/0x5a0\n [<ffffffff9bf03a43>] vfs_read+0x143/0x520\n [<ffffffff9bf04c2d>] ksys_read+0xbd/0x160\n [<ffffffff9d0f0edf>] do_syscall_64+0x3f/0x90\n [<ffffffff9d2000aa>] entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\nwhen reading file 'trace_pipe', 'iter->temp' is allocated or relocated\nin trace_find_next_entry() but not freed before 'trace_pipe' is closed.\n\nTo fix it, free 'iter->temp' in tracing_release_pipe()."
}
],
"lastModified": "2026-06-17T06:46:56.093",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}