CVE-2023-53278
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/09/2025
Last modified:
14/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ubifs: Fix memory leak in ubifs_sysfs_init()<br />
<br />
When insmod ubifs.ko, a kmemleak reported as below:<br />
<br />
unreferenced object 0xffff88817fb1a780 (size 8):<br />
comm "insmod", pid 25265, jiffies 4295239702 (age 100.130s)<br />
hex dump (first 8 bytes):<br />
75 62 69 66 73 00 ff ff ubifs...<br />
backtrace:<br />
[] slab_post_alloc_hook+0x9c/0x3c0<br />
[] __kmalloc_track_caller+0x183/0x410<br />
[] kstrdup+0x3a/0x80<br />
[] kstrdup_const+0x66/0x80<br />
[] kvasprintf_const+0x155/0x190<br />
[] kobject_set_name_vargs+0x5b/0x150<br />
[] kobject_set_name+0xbb/0xf0<br />
[] do_one_initcall+0x14c/0x5a0<br />
[] do_init_module+0x1f0/0x660<br />
[] load_module+0x6d7e/0x7590<br />
[] __do_sys_finit_module+0x19f/0x230<br />
[] __x64_sys_finit_module+0x73/0xb0<br />
[] do_syscall_64+0x35/0x80<br />
[] entry_SYSCALL_64_after_hwframe+0x63/0xcd<br />
<br />
When kset_register() failed, we should call kset_put to cleanup it.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.17 (including) | 6.1.18 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.2.5 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



