CVE-2023-53355
published 2025-09-17CVE-2023-53355: In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfs_lookup() When calling debugfs_lookup()…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.17%
7.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
staging: pi433: fix memory leak with using debugfs_lookup()
When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time. To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once. This requires saving off the root directory dentry to make
creation of individual device subdirectories easier.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 874bcba65f9a3a2a304b5f520529c046887c3cdc < 04f3cda40e9f6653ae15ed3fcf26ef2860f4df66 | 04f3cda40e9f6653ae15ed3fcf26ef2860f4df66 |
| linux | linux | >= 874bcba65f9a3a2a304b5f520529c046887c3cdc < bb16f3102607b69e1a0233f4b73c6e337f86ef8d | bb16f3102607b69e1a0233f4b73c6e337f86ef8d |
| linux | linux | >= 874bcba65f9a3a2a304b5f520529c046887c3cdc < 2f36e789e540df6a9fbf471b3a2ba62a8b361586 | 2f36e789e540df6a9fbf471b3a2ba62a8b361586 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 4.14 < 6.1.18 | 6.1.18 |
| linux | linux_kernel | >= 6.2 < 6.2.5 | 6.2.5 |
| msrc | cbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_kernel_5.15.200.1-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_kernel_5.15.202.1-1_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gr54-f9vx-r2h8: In the Linux kernel, the following vulnerability has been resolved:
staging: pi433: fix memory leak with using debugfs_lookup()
When calling debugfs
ghsa_unreviewed·2025-09-17
CVE-2023-53355 [MEDIUM] CWE-401 GHSA-gr54-f9vx-r2h8: In the Linux kernel, the following vulnerability has been resolved:
staging: pi433: fix memory leak with using debugfs_lookup()
When calling debugfs
In the Linux kernel, the following vulnerability has been resolved:
staging: pi433: fix memory leak with using debugfs_lookup()
When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time. To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once. This requires saving off the root directory dentry to make
creation of individual device subdirectories easier.
OSV
CVE-2023-53355: In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfs_lookup() When calling debugfs_l
osv·2025-09-17·CVSS 5.5
CVE-2023-53355 [MEDIUM] CVE-2023-53355: In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfs_lookup() When calling debugfs_l
In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. This requires saving off the root directory dentry to make creation of individual device subdirectories easier.
Red Hat
kernel: staging: pi433: fix memory leak with using debugfs_lookup()
vendor_redhat·2025-09-17·CVSS 5.5
CVE-2023-53355 [MEDIUM] kernel: staging: pi433: fix memory leak with using debugfs_lookup()
kernel: staging: pi433: fix memory leak with using debugfs_lookup()
In the Linux kernel, the following vulnerability has been resolved:
staging: pi433: fix memory leak with using debugfs_lookup()
When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time. To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once. This requires saving off the root directory dentry to make
creation of individual device subdirectories easier.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (R
Microsoft
staging: pi433: fix memory leak with using debugfs_lookup()
vendor_msrc·2025-09-09·CVSS 5.5
CVE-2023-53355 [MEDIUM] CWE-401 staging: pi433: fix memory leak with using debugfs_lookup()
staging: pi433: fix memory leak with using debugfs_lookup()
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Debian
CVE-2023-53355: linux - In the Linux kernel, the following vulnerability has been resolved: staging: pi...
vendor_debian·2023·CVSS 5.5
CVE-2023-53355 [MEDIUM] CVE-2023-53355: linux - In the Linux kernel, the following vulnerability has been resolved: staging: pi...
In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. This requires saving off the root directory dentry to make creation of individual device subdirectories easier.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: open
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
No detection rules found.
No public exploits indexed.
2025-09-17
Published