CVE-2023-53411

PM: EM: fix memory leak with using debugfs_lookup()

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

PM: EM: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	27871f7a8a341ef5c636a337856369acf8013e4e to before e974e8f1e37d22c0de07374f8ddc84073fef2f1dAffected 27871f7a8a341ef5c636a337856369acf8013e4e to before 84e4d4885d0ae011860fb599d50d01b8fdca2b87Affected 27871f7a8a341ef5c636a337856369acf8013e4e to before 5100c4efc30636aa48ac517dece3c3b7f84fe367Affected 27871f7a8a341ef5c636a337856369acf8013e4e to before 30fee10192e1239478a0987bc7ee445d5e980d46Affected 27871f7a8a341ef5c636a337856369acf8013e4e to before a0e8c13ccd6a9a636d27353da62c2410c4eca337Affected
LinuxLinux	5.0Affected before 5.0Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

27871f7a8a341ef5c636a337856369acf8013e4e to before e974e8f1e37d22c0de07374f8ddc84073fef2f1dAffected
27871f7a8a341ef5c636a337856369acf8013e4e to before 84e4d4885d0ae011860fb599d50d01b8fdca2b87Affected
27871f7a8a341ef5c636a337856369acf8013e4e to before 5100c4efc30636aa48ac517dece3c3b7f84fe367Affected
27871f7a8a341ef5c636a337856369acf8013e4e to before 30fee10192e1239478a0987bc7ee445d5e980d46Affected
27871f7a8a341ef5c636a337856369acf8013e4e to before a0e8c13ccd6a9a636d27353da62c2410c4eca337Affected

LinuxLinux

5.0Affected
before 5.0Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.