CVE-2023-53391 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs As the ramfs-based tmpfs uses ramfs_init_fs_context() for the init_fs_context method, which allocates fc->s_fs_info, use ramfs_kill_sb() to free it and avoid a memory leak.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/1f34bf8b442c6d720e7fa6f15e8702427e48aea9
https://git.kernel.org/stable/c/36ce9d76b0a93bae799e27e4f5ac35478c676592
https://git.kernel.org/stable/c/487f229efea80c00dd7397547ec4f25fb8999d99
https://git.kernel.org/stable/c/5fada375113767b3b57f1b04f7a4fe64ffaa626f
https://git.kernel.org/stable/c/ebe07db840992a3886694ac3d303b06f4b70ce00

History

Thu, 18 Sep 2025 13:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs As the ramfs-based tmpfs uses ramfs_init_fs_context() for the init_fs_context method, which allocates fc->s_fs_info, use ramfs_kill_sb() to free it and avoid a memory leak.
Title		shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
References		https://git.kernel.org/stable/c/1f34bf8b442c6d720e7fa6f15e8702427e48aea9 https://git.kernel.org/stable/c/36ce9d76b0a93bae799e27e4f5ac35478c676592 https://git.kernel.org/stable/c/487f229efea80c00dd7397547ec4f25fb8999d99 https://git.kernel.org/stable/c/5fada375113767b3b57f1b04f7a4fe64ffaa626f https://git.kernel.org/stable/c/ebe07db840992a3886694ac3d303b06f4b70ce00

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-18T13:33:33.602Z

Updated: 2025-09-18T13:33:33.602Z

Reserved: 2025-09-17T14:54:09.737Z

Link: CVE-2023-53391

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-53391", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-09-17T14:54:09.737Z", "datePublished": "2025-09-18T13:33:33.602Z", "dateUpdated": "2025-09-18T13:33:33.602Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-09-18T13:33:33.602Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nshmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs\n\nAs the ramfs-based tmpfs uses ramfs_init_fs_context() for the\ninit_fs_context method, which allocates fc->s_fs_info, use ramfs_kill_sb()\nto free it and avoid a memory leak."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ramfs/inode.c", "include/linux/ramfs.h", "mm/shmem.c"], "versions": [{"version": "c3b1b1cbf002e65a3cabd479e68b5f35886a26db", "lessThan": "5fada375113767b3b57f1b04f7a4fe64ffaa626f", "status": "affected", "versionType": "git"}, {"version": "c3b1b1cbf002e65a3cabd479e68b5f35886a26db", "lessThan": "487f229efea80c00dd7397547ec4f25fb8999d99", "status": "affected", "versionType": "git"}, {"version": "c3b1b1cbf002e65a3cabd479e68b5f35886a26db", "lessThan": "1f34bf8b442c6d720e7fa6f15e8702427e48aea9", "status": "affected", "versionType": "git"}, {"version": "c3b1b1cbf002e65a3cabd479e68b5f35886a26db", "lessThan": "ebe07db840992a3886694ac3d303b06f4b70ce00", "status": "affected", "versionType": "git"}, {"version": "c3b1b1cbf002e65a3cabd479e68b5f35886a26db", "lessThan": "36ce9d76b0a93bae799e27e4f5ac35478c676592", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ramfs/inode.c", "include/linux/ramfs.h", "mm/shmem.c"], "versions": [{"version": "2.6.30", "status": "affected"}, {"version": "0", "lessThan": "2.6.30", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.188", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.121", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.39", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.4.4", "lessThanOrEqual": "6.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.30", "versionEndExcluding": "5.10.188"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.30", "versionEndExcluding": "5.15.121"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.30", "versionEndExcluding": "6.1.39"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.30", "versionEndExcluding": "6.4.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.30", "versionEndExcluding": "6.5"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/5fada375113767b3b57f1b04f7a4fe64ffaa626f"}, {"url": "https://git.kernel.org/stable/c/487f229efea80c00dd7397547ec4f25fb8999d99"}, {"url": "https://git.kernel.org/stable/c/1f34bf8b442c6d720e7fa6f15e8702427e48aea9"}, {"url": "https://git.kernel.org/stable/c/ebe07db840992a3886694ac3d303b06f4b70ce00"}, {"url": "https://git.kernel.org/stable/c/36ce9d76b0a93bae799e27e4f5ac35478c676592"}], "title": "shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs", "x_generator": {"engine": "bippy-1.2.0"}}}}