Riskcovery

CVE-2023-53404

USB: fotg210: fix memory leak with using debugfs_lookup()

State
Published
Severity
5.5 Medium
Published
Sep 18, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: fotg210: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 0f60203d2142e759ac3913bb63017645ddf49f94 to before 4a71b15744b8f286718722f80b663c06ed909d8aAffected
  • 0f60203d2142e759ac3913bb63017645ddf49f94 to before 7d2d3bef6d700eb4261fb6761de2c95a9e3c0ac8Affected
  • 0f60203d2142e759ac3913bb63017645ddf49f94 to before 55c2ffc534928f4732199617e3b746d79a57898fAffected
  • 0f60203d2142e759ac3913bb63017645ddf49f94 to before 6b4040f452037a7e95472577891d57c6b18c89c5Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.100 through 5.15.*Not affected
  • 6.1.18 through 6.1.*Not affected
  • 6.2.5 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.