CVE-2023-54020

CVE-2023-54020 is a memory leak vulnerability in the Linux kernel's dmaengine sf-pdma driver. Specifically, a change intended to add multithread support inadvertently removed logic that recycled DMA descriptors, causing a new descriptor to be allocated without freeing the previous one each time sf_pdma_prep_dma_memcpy() is called. This leads to memory starvation over time. While no CVSS score is provided, the FAUCET Risk Score is 7/100, indicating a low severity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.