PT-2025-38400 · Linux+2 · Linux Kernel+2

Published 2025-09-18 · Updated 2026-03-27 · CVE-2023-53418

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the USB gadget functionality related to the lpc32xx udc driver. The issue occurs when using the debugfs lookup() function without properly releasing the allocated memory using dput(). Utilizing debugfs lookup and remove() resolves this issue by handling memory management automatically.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2023-53418

SUSE-SU-2026:0474-1

SUSE-SU-2026:0496-1

SUSE-SU-2026:0617-1

SUSE-SU-2026:1131-1

Affected Products

Astra Linux

Debian

Linux Kernel

References · 859

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53418.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53418 · Vendor Advisory
• https://git.kernel.org/stable/c/036ada6ca9eea926abc0b0ef550b10488d66d4d8 · Patch
• https://ubuntu.com/security/CVE-2023-53418 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53418 · Security Note
• https://git.kernel.org/stable/c/72c25eb9ae4993ccac4821354ff34eb1f32e4781 · Patch
• https://git.kernel.org/stable/c/7a5fdd8660174a8056de57d1fdce3a7e9f77f60e · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:0496-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1131-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53418 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0474-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53418 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53418 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53418 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53418 · Vendor Advisory