Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2023-53391: Linux kernel tmpfs may leak memory
CVE-2023-53391 · published 1 year ago
Summary
The temporary file system (tmpfs) in the Linux kernel could retain memory that should be released, leading to unnecessary memory usage. This occurs because the cleanup routine does not free certain internal data structures. Updating to the latest kernel version resolves the issue and prevents the memory waste.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1047.52~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1049.56~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1044.52~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-86.96~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1040.43~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1043.49~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-86.95~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1018.18~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1045.51~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1043.47~20.04.1.
- Update canonical linux to version 5.15.0-86.96.
- Update canonical linux-aws to version 5.15.0-1047.52.
- Update canonical linux-azure to version 5.15.0-1049.56.
- Update canonical linux-gcp to version 5.15.0-1044.52.
- Update canonical linux-gke to version 5.15.0-1044.49.
- Update canonical linux-gkeop to version 5.15.0-1030.35.
- Update canonical linux-ibm to version 5.15.0-1040.43.
- Update canonical linux-intel-iotg to version 5.15.0-1043.49.
- Update canonical linux-kvm to version 5.15.0-1044.49.
- Update canonical linux-lowlatency to version 5.15.0-86.95.
- Update canonical linux-nvidia to version 5.15.0-1037.37.
- Update canonical linux-nvidia-tegra to version 5.15.0-1018.18.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1005.5.
- Update canonical linux-oracle to version 5.15.0-1045.51.
- Update canonical linux-raspi to version 5.15.0-1040.43.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
- Update canonical linux-bluefield to version 5.15.0-1027.29.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1040.42.
- Update canonical linux-realtime to version 5.15.0-1048.54.
- Update debian linux to version 6.1.52-1.
- Update debian linux to version 6.4.4-1.
- Update linux kernel to version 6.4.4.
- Update canonical linux-azure-fde to version 5.15.0-1049.56.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 2.6.30, < 5.10.188 >= 5.11, < 5.15.121 >= 5.16, < 6.1.39 >= 6.2, < 6.4.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1047.52~20.04.1 Fix: upgrade to 5.15.0-1047.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1049.56~20.04.1 Fix: upgrade to 5.15.0-1049.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1044.52~20.04.1 Fix: upgrade to 5.15.0-1044.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-86.96~20.04.1 Fix: upgrade to 5.15.0-86.96~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1040.43~20.04.1 Fix: upgrade to 5.15.0-1040.43~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1043.49~20.04.1 Fix: upgrade to 5.15.0-1043.49~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-86.95~20.04.1 Fix: upgrade to 5.15.0-86.95~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1018.18~20.04.1 Fix: upgrade to 5.15.0-1018.18~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1045.51~20.04.1 Fix: upgrade to 5.15.0-1045.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1043.47~20.04.1 Fix: upgrade to 5.15.0-1043.47~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
Showing 50 of 142. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-86.96 Fix: upgrade to 5.15.0-86.96
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1047.52 Fix: upgrade to 5.15.0-1047.52
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1049.56 Fix: upgrade to 5.15.0-1049.56
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1044.52 Fix: upgrade to 5.15.0-1044.52
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1044.49 Fix: upgrade to 5.15.0-1044.49
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1030.35 Fix: upgrade to 5.15.0-1030.35
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1040.43 Fix: upgrade to 5.15.0-1040.43
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1043.49 Fix: upgrade to 5.15.0-1043.49
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1044.49 Fix: upgrade to 5.15.0-1044.49
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-86.95 Fix: upgrade to 5.15.0-86.95
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1037.37 Fix: upgrade to 5.15.0-1037.37
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1018.18 Fix: upgrade to 5.15.0-1018.18
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1005.5 Fix: upgrade to 5.15.0-1005.5
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1045.51 Fix: upgrade to 5.15.0-1045.51
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1040.43 Fix: upgrade to 5.15.0-1040.43
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1025.29 Fix: upgrade to 5.15.0-1025.29
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1027.29 Fix: upgrade to 5.15.0-1027.29
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1040.42 Fix: upgrade to 5.15.0-1040.42
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1048.54 Fix: upgrade to 5.15.0-1048.54
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 6.1.52-1 Fix: upgrade to 6.1.52-1
|
| Debian:13 | debian | linux |
< 6.4.4-1 Fix: upgrade to 6.4.4-1
|
| Linux | linux | kernel |
>= 6.2.0, < 6.4.4 Fix: upgrade to 6.4.4
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1049.56.1 Fix: upgrade to 5.15.0-1049.56.1
|
Original advisory text
shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
In the Linux kernel, the following vulnerability has been resolved: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs As the ramfs-based tmpfs uses ramfs_init_fs_context() for the init_fs_context method, which allocates fc->s_fs_info, use ramfs_kill_sb() to free it and avoid a memory leak.
References
- https://git.kernel.org/stable/c/1f34bf8b442c6d720e7fa6f15e8702427e48aea9 Third Party Advisory
- https://git.kernel.org/stable/c/36ce9d76b0a93bae799e27e4f5ac35478c676592 Third Party Advisory
- https://git.kernel.org/stable/c/487f229efea80c00dd7397547ec4f25fb8999d99 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-53391 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-53391 Third Party Advisory
- https://git.kernel.org/linus/36ce9d76b0a93bae799e27e4f5ac35478c676592 Third Party Advisory
- https://git.kernel.org/stable/c/5fada375113767b3b57f1b04f7a4fe64ffaa626f Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-53391 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53391... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53391 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/ebe07db840992a3886694ac3d303b06f4b70ce00 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Timeline
Published18 Sep 2025
Updated28 Oct 2026
First seen7 Mar 2026
Sources
CVE-2023-53391 · NVD
UBUNTU-CVE-2023-53391 · OSV
DEBIAN-CVE-2023-53391 · OSV
CVE-2023-53391 · OSV
Track software like this
Free during beta