5.5

CVE-2023-53670: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2023-53670DEBIAN-CVE-2023-53670
Published 07-10-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2023-53670 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.3% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.16%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 15 · Related 14
RHSA-2023:6583SUSE-SU-2025:21040-1SUSE-SU-2025:21052-1SUSE-SU-2025:21056-1SUSE-SU-2025:21064-1SUSE-SU-2025:4057-1

Timeline

  1. 07-10-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix dev_pm_qos memleak Call dev_pm_qos_hide_latency_tolerance() in the error unwind patch to avoid following kmemleak:- blktests (master) # kmemleak-clear; ./check nvme/044; blktests (master) # kmemleak-scan ; kmemleak-show nvme/044 (Test bi-directional authentication) [passed] runtime 2.111s ... 2.124s unreferenced object 0xffff888110c46240 (size 96): comm "nvme", pid 33461, jiffies 4345365353 (age 75.586s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000069ac2cec>] kmalloc_trace+0x25/0x90 [<000000006acc66d5>] dev_pm_qos_update_user_latency_tolerance+0x6f/0x100 [<00000000cc376ea7>] nvme_init_ctrl+0x38e/0x410 [nvme_core] [<000000007df61b4b>] 0xffffffffc05e88b3 [<00000000d152b985>] 0xffffffffc05744cb [<00000000f04a4041>] vfs_write+0xc5/0x3c0 [<00000000f9491baf>] ksys_write+0x5f/0xe0 [<000000001c46513d>] do_syscall_64+0x3b/0x90 [<00000000ecf348fe>] entry_SYSCALL_64_after_hwframe+0x72/0xdc

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

0.00 pp

From 0.16% on 22-09-2026

22-09-202622-10-2026
EPSS score
0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu84 products
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
  • linux-aws-5.13All versions (No fix recorded)
  • linux-aws-5.19All versions (No fix recorded)
Linux2 products
  • linux≥ f50fff73d620cd6e8f48bc58d4f1c944615a3fea, < e1379e067b9485e5af03399fe3f0d39bccb023ad | ≥ f50fff73d620cd6e8f48bc58d4f1c944615a3fea, < 7237c26431cc78e5ec3259f4350f3dd58f6a4319 | ≥ f50fff73d620cd6e8f48bc58d4f1c944615a3fea, < 2ed9a89192e3192e5fea7ff6475c8722513f325e | ≥ f50fff73d620cd6e8f48bc58d4f1c944615a3fea, < 7ed5cf8e6d9bfb6a78d0471317edff14f0f2b4dd | 6.0
  • linux_kernel≥ 6.0, < 6.1.39 | ≥ 6.2, < 6.3.13 | ≥ 6.4, < 6.4.4
Debian1 product
  • linux< 6.1.52-1 | < 6.4.4-1

3 vendors · 87 products

References

8 links