CVE-2023-53221
bpf: Fix memleak due to fentry attach failure
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memleak due to fentry attach failure If it fails to attach fentry, the allocated bpf trampoline image will be left in the system. That can be verified by checking /proc/kallsyms. This meamleak can be verified by a simple bpf program as follows: SEC("fentry/trap_init") int fentry_run() { return 0; } It will fail to attach trap_init because this function is freed after kernel init, and then we can find the trampoline image is left in the system by checking /proc/kallsyms. $ tail /proc/kallsyms ffffffffc0613000 t bpf_trampoline_6442453466_1 [bpf] ffffffffc06c3000 t bpf_trampoline_6442453466_1 [bpf] $ bpftool btf dump file /sys/kernel/btf/vmlinux | grep "FUNC 'trap_init'" [2522] FUNC 'trap_init' type_id=119 linkage=static $ echo $((6442453466 & 0x7fffffff)) 2522 Note that there are two left bpf trampoline images, that is because the libbpf will fallback to raw tracepoint if -EINVAL is returned.
Timeline
ID reserved
By Linux
Published
- 8 months later
· 8 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.16% · top 95% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected e21aa341785c679dd409c8cb71f864c00fe6c463 – < 20109ddd5bea2c24d790debf5d02584ef24c3f5e
- affected e21aa341785c679dd409c8cb71f864c00fe6c463 – < f72c67d1a82dada7d6d504c806e111e913721a30
- affected e21aa341785c679dd409c8cb71f864c00fe6c463 – < 6aa27775db63ba8c7c73891c7dfb71ddc230c48d
- affected e21aa341785c679dd409c8cb71f864c00fe6c463 – < 108598c39eefbedc9882273ac0df96127a629220
- affected e21d2b92354b3cd25dd774ebb0f0e52ff04a7861
- affected 85d177f56e5256e14b74a65940f981f6e3e8bb32
- affected 5.10.28 – < 5.11
- affected 5.11.11 – < 5.12
- affected 5.12
- unaffected < 5.12
- unaffected 6.1.39 – ≤ 6.1.*
- unaffected 6.3.13 – ≤ 6.3.*
- unaffected 6.4.4 – ≤ 6.4.*
- unaffected 6.5 – ≤ *
References (4)
- https://git.kernel.org/stable/c/20109ddd5bea2c24d790debf5d02584ef24c3f5e (opens in a new tab)
- https://git.kernel.org/stable/c/f72c67d1a82dada7d6d504c806e111e913721a30 (opens in a new tab)
- https://git.kernel.org/stable/c/6aa27775db63ba8c7c73891c7dfb71ddc230c48d (opens in a new tab)
- https://git.kernel.org/stable/c/108598c39eefbedc9882273ac0df96127a629220 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53221)Record last updated .