<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 05:47:51 +0000</lastBuildDate>
    <item>
      <title>CVE-2023-53649 — perf trace: Really free the evsel-&gt;priv area</title>
      <link>https://db.gcve.eu/vuln/cve-2023-53649</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;perf trace: Really free the evsel-&amp;gt;priv area&lt;/p&gt;
&lt;p&gt;In 3cb4d5e00e037c70 (&amp;#34;perf trace: Free syscall tp fields in
evsel-&amp;gt;priv&amp;#34;) it only was freeing if strcmp(evsel-&amp;gt;tp_format-&amp;gt;system,
&amp;#34;syscalls&amp;#34;) returned zero, while the corresponding initialization of
evsel-&amp;gt;priv was being performed if it was _not_ zero, i.e. if the tp
system wasn&amp;#39;t &amp;#39;syscalls&amp;#39;.&lt;/p&gt;
&lt;p&gt;Just stop looking for that and free it if evsel-&amp;gt;priv was set, which
should be equivalent.&lt;/p&gt;
&lt;p&gt;Also use the pre-existing evsel_trace__delete() function.&lt;/p&gt;
&lt;p&gt;This resolves these leaks, detected with:&lt;/p&gt;
&lt;p&gt;$ make EXTRA_CFLAGS=&amp;#34;-fsanitize=address&amp;#34; BUILD_BPF_SKEL=1 CORESIGHT=1 O=/tmp/build/perf-tools-next -C tools/perf install-bin&lt;/p&gt;
&lt;p&gt;=================================================================
  ==481565==ERROR: LeakSanitizer: detected memory leaks&lt;/p&gt;
&lt;p&gt;Direct leak of 40 byte(s) in 1 object(s) allocated from:
      #0 0x7f7343cba097 in calloc (/lib64/libasan.so.8+0xba097)
      #1 0x987966 in zalloc (/home/acme/bin/perf+0x987966)
      #2 0x52f9b9 in evsel_trace__new /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:307
      #3 0x52f9b9 in evsel__syscall_tp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:333
      #4 0x52f9b9 in evsel__init_raw_syscall_tp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:458
      #5 0x52f9b9 in perf_evsel__raw_syscall_newtp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:480
      #6 0x540e8b in trace__add_sysc…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;perf trace: Really free the evsel-&amp;gt;priv area&lt;/p&gt;
&lt;p&gt;In 3cb4d5e00e037c70 (&amp;#34;perf trace: Free syscall tp fields in
evsel-&amp;gt;priv&amp;#34;) it only was freeing if strcmp(evsel-&amp;gt;tp_format-&amp;gt;system,
&amp;#34;syscalls&amp;#34;) returned zero, while the corresponding initialization of
evsel-&amp;gt;priv was being performed if it was _not_ zero, i.e. if the tp
system wasn&amp;#39;t &amp;#39;syscalls&amp;#39;.&lt;/p&gt;
&lt;p&gt;Just stop looking for that and free it if evsel-&amp;gt;priv was set, which
should be equivalent.&lt;/p&gt;
&lt;p&gt;Also use the pre-existing evsel_trace__delete() function.&lt;/p&gt;
&lt;p&gt;This resolves these leaks, detected with:&lt;/p&gt;
&lt;p&gt;$ make EXTRA_CFLAGS=&amp;#34;-fsanitize=address&amp;#34; BUILD_BPF_SKEL=1 CORESIGHT=1 O=/tmp/build/perf-tools-next -C tools/perf install-bin&lt;/p&gt;
&lt;p&gt;=================================================================
  ==481565==ERROR: LeakSanitizer: detected memory leaks&lt;/p&gt;
&lt;p&gt;Direct leak of 40 byte(s) in 1 object(s) allocated from:
      #0 0x7f7343cba097 in calloc (/lib64/libasan.so.8+0xba097)
      #1 0x987966 in zalloc (/home/acme/bin/perf+0x987966)
      #2 0x52f9b9 in evsel_trace__new /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:307
      #3 0x52f9b9 in evsel__syscall_tp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:333
      #4 0x52f9b9 in evsel__init_raw_syscall_tp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:458
      #5 0x52f9b9 in perf_evsel__raw_syscall_newtp /home/acme/git/perf-tools-next/tools/perf/builtin-trace.c:480
      #6 0x540e8b in trace__add_sysc…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2023-53649</guid>
    </item>
  </channel>
</rss>
