CVE-2023-53391

shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs

As the ramfs-based tmpfs uses ramfs_init_fs_context() for the init_fs_context method, which allocates fc->s_fs_info, use ramfs_kill_sb() to free it and avoid a memory leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before 5fada375113767b3b57f1b04f7a4fe64ffaa626fAffected c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before 487f229efea80c00dd7397547ec4f25fb8999d99Affected c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before 1f34bf8b442c6d720e7fa6f15e8702427e48aea9Affected c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before ebe07db840992a3886694ac3d303b06f4b70ce00Affected c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before 36ce9d76b0a93bae799e27e4f5ac35478c676592Affected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.4.4 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before 5fada375113767b3b57f1b04f7a4fe64ffaa626fAffected
c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before 487f229efea80c00dd7397547ec4f25fb8999d99Affected
c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before 1f34bf8b442c6d720e7fa6f15e8702427e48aea9Affected
c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before ebe07db840992a3886694ac3d303b06f4b70ce00Affected
c3b1b1cbf002e65a3cabd479e68b5f35886a26db to before 36ce9d76b0a93bae799e27e4f5ac35478c676592Affected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.