CVE-2023-53423
published 2025-09-18CVE-2023-53423: In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sections() strdup() allocates memory for…
PriorityP415medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
objtool: Fix memory leak in create_static_call_sections()
strdup() allocates memory for key_name. We need to release the memory in
the following error paths. Add free() to avoid memory leak.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 1e7e47883830aae5e8246a22ca2fc6883c61acdf < a1368eaea058e451d20ea99ca27e72d9df0d16dd | a1368eaea058e451d20ea99ca27e72d9df0d16dd |
| linux | linux | >= 1e7e47883830aae5e8246a22ca2fc6883c61acdf < 3a75866a5ceff5d4fdd5471e06c4c4d03e0298b3 | 3a75866a5ceff5d4fdd5471e06c4c4d03e0298b3 |
| linux | linux | >= 1e7e47883830aae5e8246a22ca2fc6883c61acdf < a8f63d747bf7c983882a5ea7456a5f84ad3acad5 | a8f63d747bf7c983882a5ea7456a5f84ad3acad5 |
| linux | linux | >= 1e7e47883830aae5e8246a22ca2fc6883c61acdf < d131718d9c45d559951f57c4b88209ca407433c4 | d131718d9c45d559951f57c4b88209ca407433c4 |
| linux | linux | >= 1e7e47883830aae5e8246a22ca2fc6883c61acdf < 3da73f102309fe29150e5c35acd20dd82063ff67 | 3da73f102309fe29150e5c35acd20dd82063ff67 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 5.10 < 5.10.173 | 5.10.173 |
| linux | linux_kernel | >= 5.11 < 5.15.100 | 5.15.100 |
| linux | linux_kernel | >= 5.16 < 6.1.18 | 6.1.18 |
| linux | linux_kernel | >= 6.2 < 6.2.5 | 6.2.5 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: objtool: Fix memory leak in create_static_call_sections()
vendor_redhat·2025-09-18·CVSS 5.5
CVE-2023-53423 [MEDIUM] kernel: objtool: Fix memory leak in create_static_call_sections()
kernel: objtool: Fix memory leak in create_static_call_sections()
In the Linux kernel, the following vulnerability has been resolved:
objtool: Fix memory leak in create_static_call_sections()
strdup() allocates memory for key_name. We need to release the memory in
the following error paths. Add free() to avoid memory leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise
Debian
CVE-2023-53423: linux - In the Linux kernel, the following vulnerability has been resolved: objtool: Fi...
vendor_debian·2023·CVSS 5.5
CVE-2023-53423 [MEDIUM] CVE-2023-53423: linux - In the Linux kernel, the following vulnerability has been resolved: objtool: Fi...
In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sections() strdup() allocates memory for key_name. We need to release the memory in the following error paths. Add free() to avoid memory leak.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
OSV
CVE-2023-53423: In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sections() strdup() allocates memor
osv·2025-09-18·CVSS 5.5
CVE-2023-53423 [MEDIUM] CVE-2023-53423: In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sections() strdup() allocates memor
In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sections() strdup() allocates memory for key_name. We need to release the memory in the following error paths. Add free() to avoid memory leak.
GHSA
GHSA-2c3f-fwwh-c3v4: In the Linux kernel, the following vulnerability has been resolved:
objtool: Fix memory leak in create_static_call_sections()
strdup() allocates mem
ghsa_unreviewed·2025-09-18
CVE-2023-53423 [MEDIUM] CWE-401 GHSA-2c3f-fwwh-c3v4: In the Linux kernel, the following vulnerability has been resolved:
objtool: Fix memory leak in create_static_call_sections()
strdup() allocates mem
In the Linux kernel, the following vulnerability has been resolved:
objtool: Fix memory leak in create_static_call_sections()
strdup() allocates memory for key_name. We need to release the memory in
the following error paths. Add free() to avoid memory leak.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/3a75866a5ceff5d4fdd5471e06c4c4d03e0298b3https://git.kernel.org/stable/c/3da73f102309fe29150e5c35acd20dd82063ff67https://git.kernel.org/stable/c/a1368eaea058e451d20ea99ca27e72d9df0d16ddhttps://git.kernel.org/stable/c/a8f63d747bf7c983882a5ea7456a5f84ad3acad5https://git.kernel.org/stable/c/d131718d9c45d559951f57c4b88209ca407433c4
2025-09-18
Published