CVE-2023-53346

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53346
In the Linux kernel, the following vulnerability has been resolved: kernel/fail_function: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/29d53c4c5a6f6d2b93aaac95b65cb4c907faf2ff Patch
https://git.kernel.org/stable/c/2bb3669f576559db273efe49e0e69f82450efbca Patch
https://git.kernel.org/stable/c/94f68f3e059c478e240f65fcb64746fe371295df Patch
https://git.kernel.org/stable/c/bb99db06b8b6ce9351633fc61bec9919d8f6f52b Patch
https://git.kernel.org/stable/c/dd9981a11d74ff2eb253bb5c459876f8bd3c6c36 Patch
https://git.kernel.org/stable/c/f6d3aee1c66358471275df9dddd480010f061b0e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

11 Dec 2025, 12:51

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/29d53c4c5a6f6d2b93aaac95b65cb4c907faf2ff - () https://git.kernel.org/stable/c/29d53c4c5a6f6d2b93aaac95b65cb4c907faf2ff - Patch
References () https://git.kernel.org/stable/c/2bb3669f576559db273efe49e0e69f82450efbca - () https://git.kernel.org/stable/c/2bb3669f576559db273efe49e0e69f82450efbca - Patch
References () https://git.kernel.org/stable/c/94f68f3e059c478e240f65fcb64746fe371295df - () https://git.kernel.org/stable/c/94f68f3e059c478e240f65fcb64746fe371295df - Patch
References () https://git.kernel.org/stable/c/bb99db06b8b6ce9351633fc61bec9919d8f6f52b - () https://git.kernel.org/stable/c/bb99db06b8b6ce9351633fc61bec9919d8f6f52b - Patch
References () https://git.kernel.org/stable/c/dd9981a11d74ff2eb253bb5c459876f8bd3c6c36 - () https://git.kernel.org/stable/c/dd9981a11d74ff2eb253bb5c459876f8bd3c6c36 - Patch
References () https://git.kernel.org/stable/c/f6d3aee1c66358471275df9dddd480010f061b0e - () https://git.kernel.org/stable/c/f6d3aee1c66358471275df9dddd480010f061b0e - Patch
First Time Linux
Linux linux Kernel
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

17 Sep 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-17 15:15

Updated : 2026-01-14 19:16

NVD link : CVE-2023-53346

Mitre link : CVE-2023-53346

CVE.ORG link : CVE-2023-53346

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime