# CVE-2023-53481: linux: In the Linux kernel, the following vulnerability has been resolved:  ubi: ubi_wl_put_peb: Fix infinite loop when wear...

CVE-2023-53481 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53481, released October 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2023-53481
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: 0.0016
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 1, 2025

## Description

In the Linux kernel, the following vulnerability has been resolved:  ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed  Following process will trigger an infinite loop in ubi_wl_put_peb():  	ubifs_bgt		ubi_bgt ubifs_leb_unmap   ubi_leb_unmap     ubi_eba_unmap_leb       ubi_wl_put_peb	wear_leveling_worker                           e1 = rb_entry(rb_first(&ubi->used) 			  e2 = get_peb_for_wl(ubi) 			  ubi_io_read_vid_hdr  // return err (flash fault) 			  out_error: 			    ubi->move_from = ubi->move_to = NULL 			    wl_entry_destroy(ubi, e1) 			      ubi->lookuptbl[e->pnum] = NULL       retry:         e = ubi->lookuptbl[pnum];	// return NULL 	if (e == ubi->move_from) {	// NULL == NULL gets true 	  goto retry;			// infinite loop !!!  $ top   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     COMMAND   7676 root     20   0       0      0      0 R 100.0  0.0  ubifs_bgt0_0  Fix it by:  1) Letting ubi_wl_put_peb() returns directly if wearl leveling entry has     been removed from 'ubi->lookuptbl'.  2) Using 'ubi->wl_lock' protecting wl entry deletion to preventing an     use-after-free problem for wl entry in ubi_wl_put_peb().  Fetch a reproducer in [Link].

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 12.15 (bookworm) | 6.1.20-1 | [DEBIAN-CVE-2023-53481](https://patchblox.com/security/data/fix/linux/debian-cve-2023-53481.md) | Oct 1, 2025 |
| Linux | linux Debian 13.5 (trixie) | 6.1.20-1 | [DEBIAN-CVE-2023-53481](https://patchblox.com/security/data/fix/linux/debian-cve-2023-53481.md) | Oct 1, 2025 |
| Linux | linux Debian 14 | 6.1.20-1 | [DEBIAN-CVE-2023-53481](https://patchblox.com/security/data/fix/linux/debian-cve-2023-53481.md) | Oct 1, 2025 |

---

Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.