{"cve":"CVE-2023-53278","nvd":{"published":"2025-09-16T08:15:36.697","modified":"2026-06-17T06:44:43.360","status":"Modified","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix memory leak in ubifs_sysfs_init()\n\nWhen insmod ubifs.ko, a kmemleak reported as below:\n\n unreferenced object 0xffff88817fb1a780 (size 8):\n   comm \"insmod\", pid 25265, jiffies 4295239702 (age 100.130s)\n   hex dump (first 8 bytes):\n     75 62 69 66 73 00 ff ff                          ubifs...\n   backtrace:\n     [<ffffffff81b3fc4c>] slab_post_alloc_hook+0x9c/0x3c0\n     [<ffffffff81b44bf3>] __kmalloc_track_caller+0x183/0x410\n     [<ffffffff8198d3da>] kstrdup+0x3a/0x80\n     [<ffffffff8198d486>] kstrdup_const+0x66/0x80\n     [<ffffffff83989325>] kvasprintf_const+0x155/0x190\n     [<ffffffff83bf55bb>] kobject_set_name_vargs+0x5b/0x150\n     [<ffffffff83bf576b>] kobject_set_name+0xbb/0xf0\n     [<ffffffff8100204c>] do_one_initcall+0x14c/0x5a0\n     [<ffffffff8157e380>] do_init_module+0x1f0/0x660\n     [<ffffffff815857be>] load_module+0x6d7e/0x7590\n     [<ffffffff8158644f>] __do_sys_finit_module+0x19f/0x230\n     [<ffffffff815866b3>] __x64_sys_finit_module+0x73/0xb0\n     [<ffffffff88c98e85>] do_syscall_64+0x35/0x80\n     [<ffffffff88e00087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nWhen kset_register() failed, we should call kset_put to cleanup it.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":5.5},"cwes":["CWE-401"],"references":["https://git.kernel.org/stable/c/1c5fdf2d4647219d2267ccb08c7f2c7095bf3450","https://git.kernel.org/stable/c/203a55f04f66eea1a1ca7e5a302a7f5c99c62327","https://git.kernel.org/stable/c/d42c2b18c42da7378e67b6414aafe93b65de89d1"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-19T22:08:41.295252406+00:00"},"epss":{"cve":"CVE-2023-53278","score":0.00157,"percentile":0.04851,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}