Skip to content
Heist/ feed
Back to feed
MediumFix available

staging: pi433: fix memory leak with using debugfs_lookup()

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. This requires saving off the root directory dentry to make creation of individual device subdirectories easier.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.1.18, 6.2.5
CVEs
CVE-2023-53355
Confirmed fixed CVEs
Not specified
Updated in this feed
6 Nov 2026, 01:54 UTC · Revision 1

Source evidence

staging: pi433: fix memory leak with using debugfs_lookup()

core-osv · Original source

Published 17 Sept 2025, 14:56 UTC

In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. This requires saving off the root directory dentry to make creation of individual device subdirectories easier.

osv:CVE-2023-53355

Kernel

Fixed versions: 6.1.18, 6.2.5

Complete source record
{
  "id": "53443bed2ef030404135328951c8714c233fab5b34e4a0aea7b77c30cd6b4b5a",
  "url": "https://osv.dev/vulnerability/CVE-2023-53355",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "staging: pi433: fix memory leak with using debugfs_lookup()",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: staging: pi433: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. This requires saving off the root directory dentry to make creation of individual device subdirectories easier.",
    "evidence": "osv:CVE-2023-53355",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.18",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.2.5",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "CVE-2023-53355",
      "aliases": [
        "CVE-2023-53355"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "874bcba65f9a3a2a304b5f520529c046887c3cdc"
                },
                {
                  "fixed": "04f3cda40e9f6653ae15ed3fcf26ef2860f4df66"
                },
                {
                  "fixed": "bb16f3102607b69e1a0233f4b73c6e337f86ef8d"
                },
                {
                  "fixed": "2f36e789e540df6a9fbf471b3a2ba62a8b361586"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53355.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.14.0"
                },
                {
                  "fixed": "6.1.18"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.2.5"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53355.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:46.190598857Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/04f3cda40e9f6653ae15ed3fcf26ef2860f4df66",
        "https://git.kernel.org/stable/c/2f36e789e540df6a9fbf471b3a2ba62a8b361586",
        "https://git.kernel.org/stable/c/bb16f3102607b69e1a0233f4b73c6e337f86ef8d",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53355.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53355",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53355.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2023-53355",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 514036,
  "published_at": "2025-09-17T14:56:45.4+00:00"
}