{"id":"CVE-2023-53227","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: dirty_cow_znode: Fix memleak in error handling path\n\nFollowing process will cause a memleak for copied up znode:\n\ndirty_cow_znode\n  zn = copy_znode(c, znode);\n  err = insert_old_idx(c, zbr-\u003elnum, zbr-\u003eoffs);\n  if (unlikely(err))\n     return ERR_PTR(err);   // No one refers to zn.\n\nFix it by adding copied znode back to tnc, then it will be freed\nby ubifs_destroy_tnc_subtree() while closing tnc.\n\nFetch a reproducer in [Link].","modified":"2025-09-15T20:41:13.848637Z","published":"2025-09-15T15:15:49Z","withdrawn":"2025-09-16T06:59:10.593303Z","references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/011050fc471cd0b32410694facb47bac20e7262b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/10b6c359e374df1120b951768260083ef047d7fb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/122deabfe1428bffe95e2bf364ff8a5059bdf089"},{"type":"WEB","url":"https://git.kernel.org/stable/c/510b80abe8d2d89e4ff21d71f1804ba2e5d3a96b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5759076fc7c54614084002345a21bc2c578bf4a8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/76c488e8a0e2783c6d8753cb7354a420593e8c30"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9d4768523b092bfb9a9bfa6b1d903b968c8008cf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bbcf899036eeb98c3a938fb08946c6b52771f71c"},{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-53227"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:11","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.178-1"}]}],"versions":["5.10.103-1","5.10.103-1~bpo10+1","5.10.106-1","5.10.113-1","5.10.120-1","5.10.120-1~bpo10+1","5.10.127-1","5.10.127-2","5.10.127-2~bpo10+1","5.10.136-1","5.10.140-1","5.10.148-1","5.10.149-1","5.10.149-2","5.10.158-1","5.10.158-2","5.10.162-1","5.10.46-4","5.10.46-5","5.10.70-1","5.10.70-1~bpo10+1","5.10.84-1","5.10.92-1","5.10.92-1~bpo10+1","5.10.92-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53227.json"}},{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53227.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53227.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53227.json"}}],"schema_version":"1.7.3"}