PT-2025-37644 · Linux+4 · Linux Kernel+4

Published 2023-01-01 · Updated 2025-09-29 · CVE-2023-53202

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists when using the debugfs lookup() function within the power management (PM) domains functionality. Failing to call dput() on the result of debugfs lookup() leads to a memory leak over time. The issue is addressed by using debugfs lookup and remove() which handles the necessary logic to prevent the leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_16880

BDU:2026-05999

CESA-2024_3138

CVE-2023-53202

RHSA-2024:2394

RHSA-2024:3138

RHSA-2024_2394

RHSA-2024_3138

Affected Products

Astra Linux

Centos

Debian

Linux Kernel

Red Hat

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53202.json · Exploit
• https://bdu.fstec.ru/vul/2026-05999 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53202 · Vendor Advisory
• https://git.kernel.org/stable/c/0b6200e1e9f53dabdc30d0f6c51af9a5f664d32b · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53202 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53202 · Security Note
• https://git.kernel.org/stable/c/dddc132eb0dca3969f9146ef8feac0aa542aa305 · Patch
• https://git.kernel.org/stable/c/cde67cb7d2d1757baa83271c1f0892727e79f52e · Patch
• https://ubuntu.com/security/CVE-2023-53202 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53202 · Vendor Advisory
• https://git.kernel.org/stable/c/543d7113c37206ed7dae7bfb0b7e50955077770e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53202 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53202 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note