CVE-2023-53355

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: pi433: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. This requires saving off the root directory dentry to make creation of individual device subdirectories easier.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 874bcba65f9a3a2a304b5f520529c046887c3cdc, < 04f3cda40e9f6653ae15ed3fcf26ef2860f4df66; >= 874bcba65f9a3a2a304b5f520529c046887c3cdc, < bb16f3102607b69e1a0233f4b73c6e337f86ef8d; >= 874bcba65f9a3a2a304b5f520529c046887c3cdc, < 2f36e789e540df6a9fbf471b3a2ba62a8b361586
LinuxLinux4.14

References

Timeline

Published
Sep 17, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-533565.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_suspend ConsiCVE-2023-533577.1In the Linux kernel, the following vulnerability has been resolved: md/raid10: check slab-out-of-bounds in md_bitmap_get_counter If we wriCVE-2023-533587.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UACVE-2023-533595.5In the Linux kernel, the following vulnerability has been resolved: USB: fix memory leak with using debugfs_lookup() When calling debugfs_CVE-2023-53366.5The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versionCVE-2023-533605.5In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: Rework scratch handling for READ_PLUS (again) I found that thCVE-2023-533615.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: mm: Add p?d_leaf() definitions When I do LTP test, LTP testCVE-2023-533625.5In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices ChangesCVE-2023-533637.8In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free in pci_bus_release_domain_nr() Commit c14f7cccCVE-2023-533645.5In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with partial DT Two versions CVE-2023-533655.5In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fix skb_under_panic in ip6mr_cache_report() skbuff: skb_under_pCVE-2023-533665.5In the Linux kernel, the following vulnerability has been resolved: block: be a bit more careful in checking for NULL bdev while polling W
CVE-2023-53355: Medium severity, CVSS 5.5 | Vulnix