CVE-2023-53261
BaseFortify
Publication date: 2025-09-15
Last updated on: 2025-12-02
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.3 (inc) to 6.5.3 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-401 | The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory leak in the Linux kernel's coresight component related to the ACPI buffer pointer. Specifically, the ACPI buffer memory allocated is not properly freed because it is still used after returning from a function called acpi_get_dsd_graph(). The fix involves moving temporary variables and freeing the buffer before the function returns to prevent the memory leak.
How can this vulnerability impact me? :
The memory leak can cause increased memory usage over time, potentially leading to system instability or degraded performance. If the leak is significant, it could exhaust system memory resources, causing crashes or other unexpected behavior in systems running the affected Linux kernel.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by using kmemleak to identify memory leaks related to the ACPI buffer pointer in the Linux kernel. Running kmemleak and checking its reports for unreferenced objects associated with systemd-udevd or coresight components can help detect the issue. Specific commands include enabling kmemleak in the kernel, then checking the kmemleak output via: cat /sys/kernel/debug/kmemleak
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Linux kernel to a version where the coresight memory leak in acpi_buffer->pointer has been fixed. The fix involves freeing the ACPI buffer memory before function return to prevent the leak. Until an update is applied, monitoring for memory leaks using kmemleak and minimizing use of affected components may help reduce impact.