PT-2025-37668 · Ubifs+1 · Ubifs+1

Published 2025-09-15 · Updated 2025-09-16 · CVE-2023-53227

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified and resolved in the ubifs module within the Linux kernel. The issue occurs within the dirty cow znode function during error handling when copying a znode. Specifically, if an error occurs after copying the znode but before it is referenced, the copied znode is not freed, leading to a memory leak. The fix involves adding the copied znode back to the transaction node cache (tnc) to ensure it is freed when the tnc is closed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-53227

Affected Products

Linux Kernel

Ubifs

References · 18

• https://security-tracker.debian.org/tracker/CVE-2023-53227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53227 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53227 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53227 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53227 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53227 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53227 · Vendor Advisory
• https://git.kernel.org/stable/c/122deabfe1428bffe95e2bf364ff8a5059bdf089 · Note
• https://git.kernel.org/stable/c/011050fc471cd0b32410694facb47bac20e7262b · Note
• https://git.kernel.org/stable/c/76c488e8a0e2783c6d8753cb7354a420593e8c30 · Note
• https://git.kernel.org/stable/c/10b6c359e374df1120b951768260083ef047d7fb · Note
• https://git.kernel.org/linus/122deabfe1428bffe95e2bf364ff8a5059bdf089 · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-53227 · Note
• https://git.kernel.org/stable/c/9d4768523b092bfb9a9bfa6b1d903b968c8008cf · Note
• https://git.kernel.org/stable/c/510b80abe8d2d89e4ff21d71f1804ba2e5d3a96b · Note