CVE-2023-52937
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 27, 2025
Updated: Apr 15, 2025
CWE ID 401
Summary
CVE-2023-52937 is a vulnerability affecting the Linux kernel. The issue lies in the hv_balloon module where a memory leak occurs when using debugfs_lookup() without calling dput() on the result. This oversight can lead to gradual memory consumption over time. To mitigate this, it is recommended to utilize debugfs_lookup_and_remove() instead, which streamlines the process and handles the logic for both lookup and removal at once.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX