drivers: base: component: fix memory leak with using debugfs_lookup()
Published Sep 18, 2025
5.5
MEDIUMCVSS 3.1
EPSS 0.14%
Description
When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once.
Affected products
-
Affected
- ≥ , <
- ≥ , <
- ≥ , <
- ≥ , <
-
Affected
- 5.13
Unaffected
- ≥ 0, < 5.13
- ≥ 5.15.100, ≤ 5.15.*
- ≥ 6.1.18, ≤ 6.1.*
- ≥ 6.2.5, ≤ 6.2.*
- 6.3
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
- < 5.15.100
- ≥ 5.16 · < 6.1.18
- ≥ 6.2 · < 6.2.5
No data.
Red Hat Enterprise Linux 8
kernel-0:4.18.0-513.5.1.el8_9
Fixed · RHSA-2023:7077
Red Hat Enterprise Linux 10
kernel
Not affected
Red Hat Enterprise Linux 6
kernel
Out of support scope
Red Hat Enterprise Linux 7
kernel
Fix deferred
Red Hat Enterprise Linux 7
kernel-rt
Fix deferred
Red Hat Enterprise Linux 8
kernel-rt
Fix deferred
Red Hat Enterprise Linux 9
kernel
Fix deferred
Red Hat Enterprise Linux 9
kernel-rt
Fix deferred
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | kernel-0:4.18.0-513.5.1.el8_9 | Fixed | RHSA-2023:7077 |
| Red Hat Enterprise Linux 10 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 6 | kernel | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Fix deferred | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (10)
- https://access.redhat.com/security/cve/CVE-2023-53409 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2396454 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-29914 Advisory
- https://git.kernel.org/stable/c/09709a49283f79184c998d6dafcc01590e4d654d Patch
- https://git.kernel.org/stable/c/79ac2b01e033181e21cc84216ace1f4160eb8950 Patch
- https://git.kernel.org/stable/c/8deb87b1e810dd558371e88ffd44339fbef27870 Patch
- https://git.kernel.org/stable/c/bf0fd01c7cc1061fb2cfda3e2044371642108e6c Patch
- https://lore.kernel.org/linux-cve-announce/2025091801-CVE-2023-53409-818d@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2023-53409
- https://www.cve.org/CVERecord?id=CVE-2023-53409
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
GitHub
No data