CVE-2023-53290

samples/bpf: Fix fout leak in hbm's run_bpf_prog

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

samples/bpf: Fix fout leak in hbm's run_bpf_prog

Fix fout being fopen'ed but then not subsequently fclose'd. In the affected branch, fout is otherwise going out of scope.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	a1270fe95b74eb3195b107c494ed1f11b932a278 to before a7ec2f424f6edad34651137783a0a59eca9aa37eAffected a1270fe95b74eb3195b107c494ed1f11b932a278 to before 7560ed6592ff4077528c239c71e91b19de985b97Affected a1270fe95b74eb3195b107c494ed1f11b932a278 to before e3e6e252d74f20f6fc610c7fef3ae7dda0109a6fAffected a1270fe95b74eb3195b107c494ed1f11b932a278 to before f2065b8b0a215bc6aa061287a2e3d9eab2446422Affected a1270fe95b74eb3195b107c494ed1f11b932a278 to before edf37bc8b03d3f948e679b2fd2d14464495f5d1bAffected a1270fe95b74eb3195b107c494ed1f11b932a278 to before 23acb14af1914010dd0aae1bbb7fab28bf518b8eAffected
LinuxLinux	5.1Affected before 5.1Not affected 5.4.244 through 5.4.Not affected 5.10.181 through 5.10.Not affected 5.15.113 through 5.15.Not affected 6.1.30 through 6.1.Not affected 6.3.4 through 6.3.*Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

a1270fe95b74eb3195b107c494ed1f11b932a278 to before a7ec2f424f6edad34651137783a0a59eca9aa37eAffected
a1270fe95b74eb3195b107c494ed1f11b932a278 to before 7560ed6592ff4077528c239c71e91b19de985b97Affected
a1270fe95b74eb3195b107c494ed1f11b932a278 to before e3e6e252d74f20f6fc610c7fef3ae7dda0109a6fAffected
a1270fe95b74eb3195b107c494ed1f11b932a278 to before f2065b8b0a215bc6aa061287a2e3d9eab2446422Affected
a1270fe95b74eb3195b107c494ed1f11b932a278 to before edf37bc8b03d3f948e679b2fd2d14464495f5d1bAffected
a1270fe95b74eb3195b107c494ed1f11b932a278 to before 23acb14af1914010dd0aae1bbb7fab28bf518b8eAffected

LinuxLinux

5.1Affected
before 5.1Not affected
5.4.244 through 5.4.*Not affected
5.10.181 through 5.10.*Not affected
5.15.113 through 5.15.*Not affected
6.1.30 through 6.1.*Not affected
6.3.4 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.