PT-2025-38397 · Linux+4 · Linux Kernel+4

Published 2024-04-30 · Updated 2026-03-14 · CVE-2023-53415

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak within the dwc3 USB driver related to the use of the debugfs lookup() function. Failing to call dput() on the result of debugfs lookup() leads to a memory leak over time. The issue is addressed by utilizing debugfs lookup and remove(), which handles the necessary memory management logic. This required refactoring to properly create and remove the root dentry for the debugfs directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_16880

BDU:2026-05900

CVE-2023-53415

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Debian

Linux Kernel

Red Hat

Suse

References · 867

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53415.json · Exploit
• https://ubuntu.com/security/CVE-2023-53415 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53415 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53415 · Vendor Advisory
• https://git.kernel.org/stable/c/ce234af49d103d95e3fdca59b25e0d0242f41bb4 · Patch
• https://git.kernel.org/stable/c/bab872b638130a18fd54d9adfad7db77ed6457be · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53415 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53415 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53415 · Security Note
• https://git.kernel.org/stable/c/cf52c320cf74245ce1c12b0bd48f77b87d77fbc9 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53415 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53415 · Vendor Advisory
• https://git.kernel.org/stable/c/be308d68785b205e483b3a0c61ba3a82da468f2c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory