CVE-2023-53353CWE-401

CVE-2023-53353

Medium · published September 17, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()

The memory manager IDR is currently destroyed when user releases the

file descriptor.

However, at this point the user context might be still held, and memory

buffers might be still in use.

Later on, calls to release those buffers will fail due to not finding

their handles in the IDR, leading to a memory leak.

To avoid this leak, split the IDR destruction from the memory manager

fini, and postpone it to hpriv_release() when there is no user context

and no buffers are used.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2025-09-17T19:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 5.1, < 6.3.46.3.4
References (3)
EPSS history
Timeline
  • 17 SEP 14:56Z
    accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()
    cvelistv5