CVE-2023-53221

MEDIUM EPSS 4.1%

Published Sep 15, 20259mo ago · Modified Jun 17, 20262w ago

5.5 CVSS 3.1

Medium

Published Sep 15, 2025 9mo ago

Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memleak due to fentry attach failure If it fails to attach fentry, the allocated bpf trampoline image will be left in the system. That can be verified by checking /proc/kallsyms. This meamleak can be verified by a simple bpf program as follows: SEC("fentry/trap_init") int fentry_run() { return 0; } It will fail to attach trap_init because this function is freed after kernel init, and then we can find the trampoline image is left in the system by checking /proc/kallsyms. $ tail /proc/kallsyms ffffffffc0613000 t bpf_trampoline_6442453466_1 [bpf] ffffffffc06c3000 t bpf_trampoline_6442453466_1 [bpf] $ bpftool btf dump file /sys/kernel/btf/vmlinux | grep "FUNC 'trap_init'" [2522] FUNC 'trap_init' type_id=119 linkage=static $ echo $((6442453466 & 0x7fffffff)) 2522 Note that there are two left bpf trampoline images, that is because the libbpf will fallback to raw tracepoint if -EINVAL is returned.

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

4.1% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-401

Affected Products 10

Vendor	Product	Version	Range
linux	linux_kernel	*	≥5.10.28 – <5.11
linux	linux_kernel	*	≥5.11.11 – <5.12
linux	linux_kernel	*	≥5.12.1 – <6.1.39
linux	linux_kernel	*	≥6.2 – <6.3.13
linux	linux_kernel	*	≥6.4 – <6.4.4
linux	linux_kernel	5.12	any
linux	linux_kernel	5.12	any
linux	linux_kernel	5.12	any
linux	linux_kernel	5.12	any
linux	linux_kernel	5.12	any

References 4

git.kernel.org https://git.kernel.org/stable/c/108598c39eefbedc9882273ac0df96127a629220

Patch
git.kernel.org https://git.kernel.org/stable/c/20109ddd5bea2c24d790debf5d02584ef24c3f5e

Patch
git.kernel.org https://git.kernel.org/stable/c/6aa27775db63ba8c7c73891c7dfb71ddc230c48d

Patch
git.kernel.org https://git.kernel.org/stable/c/f72c67d1a82dada7d6d504c806e111e913721a30

Patch

Remediation

git.kernel.org https://git.kernel.org/stable/c/108598c39eefbedc9882273ac0df96127a629220

Patch
git.kernel.org https://git.kernel.org/stable/c/20109ddd5bea2c24d790debf5d02584ef24c3f5e

Patch
git.kernel.org https://git.kernel.org/stable/c/6aa27775db63ba8c7c73891c7dfb71ddc230c48d

Patch
git.kernel.org https://git.kernel.org/stable/c/f72c67d1a82dada7d6d504c806e111e913721a30

Patch