{
  "cveId": "CVE-2023-53800",
  "url": "https://patchblox.com/security/cve/CVE-2023-53800",
  "summary": "CVE-2023-53800 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53800, released December 9, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ubi: Fix use-after-free when volume resizing fai...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ubi: Fix use-after-free when volume resizing failed  There is an use-after-free problem reported by KASAN:   ==================================================================   BUG: KASAN: use-after-free in ubi_eba_copy_table\u002B0x11f/0x1c0 [ubi]   Read of size 8 at addr ffff888101eec008 by task ubirsvol/4735    CPU: 2 PID: 4735 Comm: ubirsvol   Not tainted 6.1.0-rc1-00003-g84fa3304a7fc-dirty #14   Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996),   BIOS 1.14.0-1.fc33 04/01/2014   Call Trace:    \u003CTASK\u003E    dump_stack_lvl\u002B0x34/0x44    print_report\u002B0x171/0x472    kasan_report\u002B0xad/0x130    ubi_eba_copy_table\u002B0x11f/0x1c0 [ubi]    ubi_resize_volume\u002B0x4f9/0xbc0 [ubi]    ubi_cdev_ioctl\u002B0x701/0x1850 [ubi]    __x64_sys_ioctl\u002B0x11d/0x170    do_syscall_64\u002B0x35/0x80    entry_SYSCALL_64_after_hwframe\u002B0x46/0xb0    \u003C/TASK\u003E  When ubi_change_vtbl_record() returns an error in ubi_resize_volume(), \u0022new_eba_tbl\u0022 will be freed on error handing path, but it is holded by \u0022vol-\u003Eeba_tbl\u0022 in ubi_eba_replace_table(). It means that the liftcycle of \u0022vol-\u003Eeba_tbl\u0022 and \u0022vol\u0022 are different, so when resizing volume in next time, it causing an use-after-free fault.  Fix it by not freeing \u0022new_eba_tbl\u0022 after it replaced in ubi_eba_replace_table(), while will be freed in next volume resizing.",
  "published": "2025-12-09T01:16:51Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00139,
  "epssPercentile": 0.0329,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53800",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53800",
      "released": "2025-12-09T01:16:51Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53800",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53800",
      "released": "2025-12-09T01:16:51Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53800",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53800",
      "released": "2025-12-09T01:16:51Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}