CVE-2023-54171

A memory leak flaw was found in the Linux kernel's tracing subsystem. When reading from the trace_pipe file, a temporary buffer (iter->temp) is allocated but not freed when the file is closed. Repeated reads from trace_pipe can gradually exhaust system memory.

Exploiting this leak requires repeated access to /sys/kernel/tracing/trace_pipe, which typically requires root or CAP_SYS_ADMIN. While memory can be exhausted over time, the leak rate is relatively slow and would be noticed in monitoring before causing system impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.