Log in Start free

Vulnerability · Published Sep 18, 2025 · Assigned by Linux

CVE-2023-53396ubifs: Fix memory leak in do_rename

Medium 5.5

In plain English

A medium-severity memory leak in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 95.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in do_rename If renaming a file in an encrypted directory, function fscrypt_setup_filename allocates memory for a file name. This name is never used, and before returning to the caller the memory for it is not freed. When running kmemleak on it we see that it is registered as a leak. The report below is triggered by a simple program 'rename' that renames a file in an encrypted directory: unreferenced object 0xffff888101502840 (size 32): comm "rename", pid 9404, jiffies 4302582475 (age 435.735s) backtrace: __kmem_cache_alloc_node __kmalloc fscrypt_setup_filename do_rename ubifs_rename vfs_rename do_renameat2 To fix this we can remove the call to fscrypt_setup_filename as it's not needed.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.37-1DEBIAN-CVE-2023-53396
Debian:13linux6.3.7-1DEBIAN-CVE-2023-53396
Debian:14linux6.3.7-1DEBIAN-CVE-2023-53396
Ubuntu:22.04:LTSlinux5.15.0-83.92UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-aws5.15.0-1044.49UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-azure5.15.0-1046.53UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1046.53.1UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-gcp5.15.0-1041.49UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-gke5.15.0-1041.46UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1027.32UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-ibm5.15.0-1037.40UBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1039.45UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-kvm5.15.0-1041.46UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-83.92UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1032.32UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1017.17UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1004.4UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-oracle5.15.0-1042.48UBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-raspi5.15.0-1037.40UBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53396
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53396
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1025.29UBUNTU-CVE-2023-53396

Affected products (as reported)

VendorProductVersions
Linux Linux c67bc98d1f0853bb196e9c48eab38b6f2ddab795 – before 43b2f7d690697182beed6f71aa57b7249d3cfc9c278d9a243635f26c05ad95dcf9c5a593b9e04dc6 – before 9f565752b328fe53c9e42b7d4e4d89a1da63d738278d9a243635f26c05ad95dcf9c5a593b9e04dc6 – before 7e264f67b7d6580eff5c2696961039fd05c69258278d9a243635f26c05ad95dcf9c5a593b9e04dc6 – before 517ddc0259d7a7231486bdafde8035c478bc4088278d9a243635f26c05ad95dcf9c5a593b9e04dc6 – before 3a36d20e012903f45714df2731261fdefac900cb17495eb2f7f08113b50aba298c2c1a045824c4f7868de33a39e0e1e91ed3ce4a23a65f30144d24435.15.33 – before 5.15.112
Linux Linux 5.18

Weakness: CWE-401 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References