PT-2025-38442 · Linux+1 · Linux Kernel+1

Published 2025-09-18 · Updated 2025-12-11 · CVE-2023-53423

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak was identified and resolved in the create static call sections() function within the Linux kernel's objtool. The strdup() function allocates memory for key name, and the fix adds free() calls to release this memory in specific error paths, preventing the leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2023-53423

Affected Products

Astra Linux

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53423.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53423 · Security Note
• https://git.kernel.org/stable/c/a8f63d747bf7c983882a5ea7456a5f84ad3acad5 · Patch
• https://ubuntu.com/security/CVE-2023-53423 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53423 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53423 · Vendor Advisory
• https://git.kernel.org/stable/c/3da73f102309fe29150e5c35acd20dd82063ff67 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53423 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53423 · Vendor Advisory
• https://git.kernel.org/stable/c/3a75866a5ceff5d4fdd5471e06c4c4d03e0298b3 · Patch
• https://git.kernel.org/stable/c/d131718d9c45d559951f57c4b88209ca407433c4 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53423 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53423 · Vendor Advisory
• https://git.kernel.org/stable/c/a1368eaea058e451d20ea99ca27e72d9df0d16dd · Patch
• https://docs.bell-sw.com/security/cves/CVE-2023-53423 · Note