Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-53409 Details

Description

In the Linux kernel, the following vulnerability has been resolved: drivers: base: component: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/09709a49283f79184c998d6dafcc01590e4d654d kernel.orgPatch
https://git.kernel.org/stable/c/79ac2b01e033181e21cc84216ace1f4160eb8950 kernel.orgPatch
https://git.kernel.org/stable/c/8deb87b1e810dd558371e88ffd44339fbef27870 kernel.orgPatch
https://git.kernel.org/stable/c/bf0fd01c7cc1061fb2cfda3e2044371642108e6c kernel.orgPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-401Missing Release of Memory after Effective Lifetime[email protected]
CWE-401Missing Release of Memory after Effective LifetimeCISA-ADP

Affected Products

ProductVersions
linux linux kernel
< 5.15.100
>= 5.16, < 6.1.18
>= 6.2, < 6.2.5

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2023-53409
NVD Published Date:
Sep 18, 2025
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2023-53409 Details - Not Deferred