{"id":"DEBIAN-CVE-2023-54020","details":"In the Linux kernel, the following vulnerability has been resolved:  dmaengine: sf-pdma: pdma_desc memory leak fix  Commit b2cc5c465c2c (\"dmaengine: sf-pdma: Add multithread support for a DMA channel\") changed sf_pdma_prep_dma_memcpy() to unconditionally allocate a new sf_pdma_desc each time it is called.  The driver previously recycled descs, by checking the in_use flag, only allocating additional descs if the existing one was in use. This logic was removed in commit b2cc5c465c2c (\"dmaengine: sf-pdma: Add multithread support for a DMA channel\"), but sf_pdma_free_desc() was not changed to handle the new behaviour.  As a result, each time sf_pdma_prep_dma_memcpy() is called, the previous descriptor is leaked, over time leading to memory starvation:    unreferenced object 0xffffffe008447300 (size 192):   comm \"irq/39-mchp_dsc\", pid 343, jiffies 4294906910 (age 981.200s)   hex dump (first 32 bytes):     00 00 00 ff 00 00 00 00 b8 c1 00 00 00 00 00 00  ................     00 00 70 08 10 00 00 00 00 00 00 c0 00 00 00 00  ..p.............   backtrace:     [\u003c00000000064a04f4\u003e] kmemleak_alloc+0x1e/0x28     [\u003c00000000018927a7\u003e] kmem_cache_alloc+0x11e/0x178     [\u003c000000002aea8d16\u003e] sf_pdma_prep_dma_memcpy+0x40/0x112  Add the missing kfree() to sf_pdma_free_desc(), and remove the redundant in_use flag.","modified":"2026-09-15T08:47:42.029793456Z","published":"2025-12-24T11:15:55.003Z","upstream":["CVE-2023-54020"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-54020"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54020.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54020.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54020.json"}}],"schema_version":"1.9.0"}