What’s Vulnerable › Vulnerabilities

CVE-2023-53423: objtool: Fix memory leak in create_static_call_sections()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sections() strdup() allocates memory for key_name. We need to release the memory in the following error paths. Add free() to avoid memory leak.

Affected products

• Linux kernel: from 5.10 before 5.10.173; from 5.11 before 5.15.100; from 5.16 before 6.1.18; from 6.2 before 6.2.5 — fixed in 5.10.173, 5.15.100, 6.1.18, 6.2.5

How to fix

Upgrade to a fixed version: Linux kernel 5.10.173, 5.15.100, 6.1.18, 6.2.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3a75866a5ceff5d4fdd5471e06c4c4d03e0298b3
• https://git.kernel.org/stable/c/3da73f102309fe29150e5c35acd20dd82063ff67
• https://git.kernel.org/stable/c/a1368eaea058e451d20ea99ca27e72d9df0d16dd
• https://git.kernel.org/stable/c/a8f63d747bf7c983882a5ea7456a5f84ad3acad5
• https://git.kernel.org/stable/c/d131718d9c45d559951f57c4b88209ca407433c4

Get alerted when CVE-2023-53423 or the next vulnerability affects your stack