cbcvebase.
CVE-2023-53097
published 2025-05-02

CVE-2023-53097: In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: fix memory leak with using debugfs_lookup() When calling debugfs_lookup()…

PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.8th percentile
In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.20-1 (bookworm)linux 6.1.20-1 (bookworm)
linuxlinux
linuxlinux>= 691602aab9c3cce31d3ff9529c09b7922a5f6224 < e3a62a35f903fd8be5b44542fe3901ec45f16757e3a62a35f903fd8be5b44542fe3901ec45f16757
linuxlinux>= 691602aab9c3cce31d3ff9529c09b7922a5f6224 < 24c1bd1cd0d1ff821fd7d2f01a1e648c7882dfc224c1bd1cd0d1ff821fd7d2f01a1e648c7882dfc2
linuxlinux>= 691602aab9c3cce31d3ff9529c09b7922a5f6224 < 4050498c0ae3946c223fc63e9dd7b878b76611e04050498c0ae3946c223fc63e9dd7b878b76611e0
linuxlinux>= 691602aab9c3cce31d3ff9529c09b7922a5f6224 < b505063910c134778202dfad9332dfcecb76bab3b505063910c134778202dfad9332dfcecb76bab3
linuxlinux_kernel< 5.15.1035.15.103
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 5.16 < 6.1.206.1.20
linuxlinux_kernel>= 6.2 < 6.2.76.2.7

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.