CVE-2023-53408

trace/blktrace: fix memory leak with using debugfs_lookup()

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 23, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

trace/blktrace: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	78acc7dbd84a8c173a08584750845c31611160f2 to before a2e4b48d6f9b39aa19bafe223f9dd436a692fc80Affected 30939293262eb433c960c4532a0d59c4073b2b84 to before 3036f5f5ae5210797d95446795df01c1249af9adAffected 30939293262eb433c960c4532a0d59c4073b2b84 to before 5286b72fb425291af5f4ca7285d73c16a08d8691Affected 30939293262eb433c960c4532a0d59c4073b2b84 to before 83e8864fee26f63a7435e941b7c36a20fd6fe93eAffected 6418634238ade86f2b08192928787f39d8afb58cAffected 5.15.27 to before 5.15.99Affected 5.16.13 to before 5.17Affected
LinuxLinux	5.17Affected before 5.17Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

78acc7dbd84a8c173a08584750845c31611160f2 to before a2e4b48d6f9b39aa19bafe223f9dd436a692fc80Affected
30939293262eb433c960c4532a0d59c4073b2b84 to before 3036f5f5ae5210797d95446795df01c1249af9adAffected
30939293262eb433c960c4532a0d59c4073b2b84 to before 5286b72fb425291af5f4ca7285d73c16a08d8691Affected
30939293262eb433c960c4532a0d59c4073b2b84 to before 83e8864fee26f63a7435e941b7c36a20fd6fe93eAffected
6418634238ade86f2b08192928787f39d8afb58cAffected
5.15.27 to before 5.15.99Affected
5.16.13 to before 5.17Affected

LinuxLinux

5.17Affected
before 5.17Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.