Riskcovery

CVE-2023-53318

recordmcount: Fix memory leaks in the uwrite function

State
Published
Severity
5.5 Medium
Published
Sep 16, 2025
Updated
May 23, 2026
Reserved
Sep 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

recordmcount: Fix memory leaks in the uwrite function

Common realloc mistake: 'file_append' nulled but not freed upon failure

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • a50bd43935586420fb75f4558369eb08566fac5e to before bd39f68a309a947670379bf9a39b16c584f86ddbAffected
  • a50bd43935586420fb75f4558369eb08566fac5e to before 444ec005404cead222ebce2561a9451c9ee5ad89Affected
  • a50bd43935586420fb75f4558369eb08566fac5e to before 3ed95a6f6c646e8bb15c354536e0ab10e8f39c08Affected
  • a50bd43935586420fb75f4558369eb08566fac5e to before 2d9ca5f62f2ba160ff9c9be4adf401c46c04edefAffected
  • a50bd43935586420fb75f4558369eb08566fac5e to before ff70ad9159fbb566b2c15724f44207e8deccd527Affected
  • a50bd43935586420fb75f4558369eb08566fac5e to before 895130e63c93926f07caf5db286b97bd27b81de9Affected
  • a50bd43935586420fb75f4558369eb08566fac5e to before 25c9b185f121812cbc215fdaa1192c6b9025b428Affected
  • a50bd43935586420fb75f4558369eb08566fac5e to before fa359d068574d29e7d2f0fdd0ebe4c6a12b5cfb9Affected
  • fa41a0adbc216e18afe7a2dd4386f614899a0653Affected
  • 334e907923e9cab057020a9c7ec7d9f32ead6573Affected
  • 3.2.76 to before 3.3Affected
  • 3.4.113 to before 3.5Affected
LinuxLinux
  • 4.4Affected
  • before 4.4Not affected
  • 4.14.316 through 4.14.*Not affected
  • 4.19.284 through 4.19.*Not affected
  • 5.4.244 through 5.4.*Not affected
  • 5.10.181 through 5.10.*Not affected
  • 5.15.113 through 5.15.*Not affected
  • 6.1.30 through 6.1.*Not affected
  • 6.3.4 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.