Riskcovery

CVE-2023-53390

drivers: base: dd: fix memory leak with using debugfs_lookup()

State
Published
Severity
5.5 Medium
Published
Sep 18, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drivers: base: dd: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 2942df675128b156b0bc8571e2cb2d006fc26e84 to before 7f1e53f88e8babf293ec052b70aa9d2a3554360cAffected
  • 2942df675128b156b0bc8571e2cb2d006fc26e84 to before 5a7a9efdb193d3c8a35821548a8e99612c358828Affected
  • 2942df675128b156b0bc8571e2cb2d006fc26e84 to before 8e47e2bf78812adbd73c45c941d3c51add30b58dAffected
  • 2942df675128b156b0bc8571e2cb2d006fc26e84 to before 36c893d3a759ae7c91ee7d4871ebfc7504f08c40Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.100 through 5.15.*Not affected
  • 6.1.18 through 6.1.*Not affected
  • 6.2.5 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.