CVE-2023-53396: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability was discovered in the Linux kernel's UBIFS (Unsorted Block Image File System) implementation, specifically in the dorename function. When renaming a file in an encrypted directory, the fscryptsetup_filename function allocates memory for a file name that is never used and not freed before returning to the caller (NVD, Ubuntu).

The vulnerability occurs during file rename operations in encrypted UBIFS directories. When kmemleak is run, it detects an unreferenced object of size 32 bytes, identified as 0xffff888101502840, associated with the 'rename' process (pid 9404). The issue stems from an unnecessary call to fscryptsetupfilename that allocates memory without properly freeing it (NVD).

The vulnerability results in a memory leak in the Linux kernel when renaming files in encrypted UBIFS directories. While memory leaks can potentially lead to system resource exhaustion over time, the immediate impact appears to be limited (NVD).

The vulnerability has been fixed by removing the unnecessary call to fscryptsetupfilename. Several Linux distributions have released patches, including Ubuntu which has fixed the issue in multiple kernel versions such as linux-kvm (5.15.0-1041.46) and linux-azure (5.15.0-1046.53) (Ubuntu).