CVE-2023-52977

Summary

CVE-2023-52977: A memory leak vulnerability has been identified and resolved in the Linux kernel's Open vSwitch (OVS) component. The issue was discovered by Syzkaller, a Linux fuzzing tool, which detected a memory leak of the 'new_flow' object in 'ovs_flow_cmd_new()'. This object was not being freed when an allocation of a key failed. The patch addresses this issue by rearranging the goto labels and adding appropriate goto statements on error paths to reflect the order of object allocations. This vulnerability could lead to a denial-of-service (DoS) attack or potentially other exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.