CVE-2023-53423

objtool: Fix memory leak in create_static_call_sections()

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

objtool: Fix memory leak in create_static_call_sections()

strdup() allocates memory for key_name. We need to release the memory in the following error paths. Add free() to avoid memory leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	1e7e47883830aae5e8246a22ca2fc6883c61acdf to before a1368eaea058e451d20ea99ca27e72d9df0d16ddAffected 1e7e47883830aae5e8246a22ca2fc6883c61acdf to before 3a75866a5ceff5d4fdd5471e06c4c4d03e0298b3Affected 1e7e47883830aae5e8246a22ca2fc6883c61acdf to before a8f63d747bf7c983882a5ea7456a5f84ad3acad5Affected 1e7e47883830aae5e8246a22ca2fc6883c61acdf to before d131718d9c45d559951f57c4b88209ca407433c4Affected 1e7e47883830aae5e8246a22ca2fc6883c61acdf to before 3da73f102309fe29150e5c35acd20dd82063ff67Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.173 through 5.10.Not affected 5.15.100 through 5.15.Not affected 6.1.18 through 6.1.Not affected 6.2.5 through 6.2.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

1e7e47883830aae5e8246a22ca2fc6883c61acdf to before a1368eaea058e451d20ea99ca27e72d9df0d16ddAffected
1e7e47883830aae5e8246a22ca2fc6883c61acdf to before 3a75866a5ceff5d4fdd5471e06c4c4d03e0298b3Affected
1e7e47883830aae5e8246a22ca2fc6883c61acdf to before a8f63d747bf7c983882a5ea7456a5f84ad3acad5Affected
1e7e47883830aae5e8246a22ca2fc6883c61acdf to before d131718d9c45d559951f57c4b88209ca407433c4Affected
1e7e47883830aae5e8246a22ca2fc6883c61acdf to before 3da73f102309fe29150e5c35acd20dd82063ff67Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.173 through 5.10.*Not affected
5.15.100 through 5.15.*Not affected
6.1.18 through 6.1.*Not affected
6.2.5 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.