BaseFortify

Publication date: 2025-10-01

Last updated on: 2025-10-02

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() The memory allocated in tb_queue_dp_bandwidth_request() needs to be released once the request is handled to avoid leaking it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-01

Last Modified

2025-10-02

Generated

2026-07-06

AI Q&A

2025-10-01

EPSS Evaluated

2026-07-05

NVD

CVE-2023-53527

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak in the Linux kernel's Thunderbolt driver. Specifically, memory allocated during a DisplayPort bandwidth request is not properly released after the request is handled, which causes the system to leak memory over time.

Impact Analysis

The memory leak can lead to increased memory usage on the affected system, potentially causing degraded performance or system instability if the leak accumulates over time.

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version where the memory leak in tb_handle_dp_bandwidth_request() has been fixed. This will ensure that the memory allocated in tb_queue_dp_bandwidth_request() is properly released and prevent the leak.

Hi! I’m here to help you understand CVE-2023-53527. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70