PT-2025-38203 · Linux+1 · Linux Kernel+1

Published 2025-09-17 · Updated 2026-04-20 · CVE-2023-53353

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The memory manager IDR is destroyed when a user releases the file descriptor. However, the user context might still be held at this point, and memory buffers might still be in use. Subsequent calls to release these buffers can fail due to the handles not being found in the IDR, leading to a memory leak. The issue is resolved by postponing the IDR destruction to hpriv release(), ensuring no user context or buffers are in use during the process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-71906

CVE-2023-53353

ECHO-F1CB-BD8B-F8E0

Affected Products

Debian

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53353.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-53353 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53353 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53353 · Vendor Advisory
• https://git.kernel.org/stable/c/840de329ca99cafd0cdde9c6ac160b1330942aba · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53353 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-53353 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53353 · Vendor Advisory
• https://git.kernel.org/stable/c/2e8e9a895c4589f124a37fc84d123b5114406e94 · Patch
• https://ubuntu.com/security/CVE-2023-53353 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53353 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53353 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53353 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-71906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53353 · Security Note