CVE-2023-53359: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53359 is a memory leak vulnerability discovered in the Linux kernel's USB subsystem. The issue specifically relates to the debugfs_lookup() function, where memory leaks occur when the function result is not properly handled with dput() (NVD, RedHat).

The vulnerability occurs in the USB subsystem of the Linux kernel when calling debugfslookup(). The issue arises because the result of debugfslookup() must have dput() called on it to prevent memory from leaking over time. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 with vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H and is categorized as CWE-772 (RedHat).

The vulnerability results in memory leaks that accumulate over time in the affected systems. This can lead to degraded system performance and potential resource exhaustion if left unaddressed (NVD).

The vulnerability has been fixed by replacing the debugfslookup() call with debugfslookupandremove(), which handles all the required logic at once. Red Hat has released fixes for various versions including RHEL 8 (kernel-0:4.18.0-513.5.1.el89) and RHEL 9 (kernel-0:5.14.0-362.8.1.el93) (RedHat).