PT-2025-37883 · Linux+2 · Linux Kernel+2

Published 2023-02-02 · Updated 2025-09-19 · CVE-2023-53278

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified in the ubifs sysfs init() function within the UBIFS (Unsorted Block Image File System) module when the insmod ubifs.ko command is executed. The leak occurs when kset register() fails, and the necessary cleanup with kset put() is not performed. This issue was reported by a kmemleak detection tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

BDU:2026-03896

CVE-2023-53278

Affected Products

Astra Linux

Linux Kernel

Ubifs

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53278.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-53278 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03896 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53278 · Vendor Advisory
• https://git.kernel.org/stable/c/1c5fdf2d4647219d2267ccb08c7f2c7095bf3450 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53278 · Vendor Advisory
• https://git.kernel.org/stable/c/d42c2b18c42da7378e67b6414aafe93b65de89d1 · Patch
• https://git.kernel.org/stable/c/203a55f04f66eea1a1ca7e5a302a7f5c99c62327 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53278 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53278 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53278 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53278 · Security Note
• https://ubuntu.com/security/CVE-2023-53278 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5 · Note
• https://git.kernel.org/linus/203a55f04f66eea1a1ca7e5a302a7f5c99c62327 · Note