{
  "cveId": "CVE-2023-53278",
  "url": "https://patchblox.com/security/cve/CVE-2023-53278",
  "summary": "CVE-2023-53278 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53278, released September 16, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ubifs: Fix memory leak in ubifs_sysfs_init()  Wh...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ubifs: Fix memory leak in ubifs_sysfs_init()  When insmod ubifs.ko, a kmemleak reported as below:   unreferenced object 0xffff88817fb1a780 (size 8):    comm \u0022insmod\u0022, pid 25265, jiffies 4295239702 (age 100.130s)    hex dump (first 8 bytes):      75 62 69 66 73 00 ff ff                          ubifs...    backtrace:      [\u003Cffffffff81b3fc4c\u003E] slab_post_alloc_hook\u002B0x9c/0x3c0      [\u003Cffffffff81b44bf3\u003E] __kmalloc_track_caller\u002B0x183/0x410      [\u003Cffffffff8198d3da\u003E] kstrdup\u002B0x3a/0x80      [\u003Cffffffff8198d486\u003E] kstrdup_const\u002B0x66/0x80      [\u003Cffffffff83989325\u003E] kvasprintf_const\u002B0x155/0x190      [\u003Cffffffff83bf55bb\u003E] kobject_set_name_vargs\u002B0x5b/0x150      [\u003Cffffffff83bf576b\u003E] kobject_set_name\u002B0xbb/0xf0      [\u003Cffffffff8100204c\u003E] do_one_initcall\u002B0x14c/0x5a0      [\u003Cffffffff8157e380\u003E] do_init_module\u002B0x1f0/0x660      [\u003Cffffffff815857be\u003E] load_module\u002B0x6d7e/0x7590      [\u003Cffffffff8158644f\u003E] __do_sys_finit_module\u002B0x19f/0x230      [\u003Cffffffff815866b3\u003E] __x64_sys_finit_module\u002B0x73/0xb0      [\u003Cffffffff88c98e85\u003E] do_syscall_64\u002B0x35/0x80      [\u003Cffffffff88e00087\u003E] entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  When kset_register() failed, we should call kset_put to cleanup it.",
  "published": "2025-09-16T08:15:36Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00157,
  "epssPercentile": 0.04905,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53278",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53278",
      "released": "2025-09-16T08:15:36Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53278",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53278",
      "released": "2025-09-16T08:15:36Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53278",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53278",
      "released": "2025-09-16T08:15:36Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}