PT-2025-37881 · Ubifs+3 · Ubifs+3

Published 2023-04-21 · Updated 2025-10-23 · CVE-2023-53276

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the ubifs subsystem when opening a ubifs tmpfile on an encrypted directory. The fscrypt setup filename function allocates memory for the filename intended for storage in the directory entry. However, this memory is not freed after being copied to the directory entry inode, leading to a memory leak detected by kmemleak. The backtrace includes functions such as kmem cache alloc node, kmalloc, fscrypt setup filename, ubifs tmpfile, vfs tmpfile, and path openat.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Resource Exhaustion

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-770

CWE-400

CWE-404

CWE-401

Related Identifiers

BDU:2026-04614

CVE-2023-53276

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

Ubifs

References · 874

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53276.json · Exploit
• https://git.kernel.org/stable/c/29738e1bcc799dd754711d4e4aab967f0c018175 · Patch
• https://git.kernel.org/stable/c/fd197308c0e4f738c7ea687d5332035c5753881c · Patch
• https://git.kernel.org/stable/c/b8f444a4fadfb5070ed7e298e0a5ceb4a18014f3 · Patch
• https://osv.dev/vulnerability/CVE-2023-53276 · Vendor Advisory
• https://git.kernel.org/stable/c/1e43d4284bdc3bd34bd770fea13910ac37ab0618 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53276 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04614 · Security Note
• https://git.kernel.org/stable/c/8ad8c67a897e68426e85990ebfe0a7d1f71fc79f · Patch
• https://git.kernel.org/stable/c/ce840284929b75dbbf062e0ce7fcb78a63b08b5e · Patch
• https://git.kernel.org/stable/c/1fb815b38bb31d6af9bd0540b8652a0d6fe6cfd3 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://git.kernel.org/stable/c/823f554747f8aafaa965fb2f3ae794110ed429ef · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53276 · Vendor Advisory