CVE-2023-53346

kernel/fail_function: fix memory leak with using debugfs_lookup()

State: Published
Severity: 5.5 Medium
Published: Sep 17, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

kernel/fail_function: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before f6d3aee1c66358471275df9dddd480010f061b0eAffected 4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before dd9981a11d74ff2eb253bb5c459876f8bd3c6c36Affected 4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before bb99db06b8b6ce9351633fc61bec9919d8f6f52bAffected 4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before 29d53c4c5a6f6d2b93aaac95b65cb4c907faf2ffAffected 4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before 94f68f3e059c478e240f65fcb64746fe371295dfAffected 4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before 2bb3669f576559db273efe49e0e69f82450efbcaAffected
LinuxLinux	4.16Affected before 4.16Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.100 through 5.15.Not affected 6.1.18 through 6.1.Not affected 6.2.5 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before f6d3aee1c66358471275df9dddd480010f061b0eAffected
4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before dd9981a11d74ff2eb253bb5c459876f8bd3c6c36Affected
4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before bb99db06b8b6ce9351633fc61bec9919d8f6f52bAffected
4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before 29d53c4c5a6f6d2b93aaac95b65cb4c907faf2ffAffected
4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before 94f68f3e059c478e240f65fcb64746fe371295dfAffected
4b1a29a7f5425d32640b34b8a755f34e02f64d0f to before 2bb3669f576559db273efe49e0e69f82450efbcaAffected

LinuxLinux

4.16Affected
before 4.16Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.100 through 5.15.*Not affected
6.1.18 through 6.1.*Not affected
6.2.5 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.