CVE-2023-53527: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53527 is a memory leak vulnerability discovered in the Linux kernel's thunderbolt subsystem. The vulnerability was published on October 1, 2025, and specifically affects the tbhandledpbandwidthrequest() function. The issue occurs when memory allocated in tbqueuedpbandwidthrequest() is not properly released after the request is handled (NVD).

The vulnerability is specifically related to memory management in the thunderbolt subsystem of the Linux kernel. The technical issue involves a failure to release memory that was allocated during the tbqueuedpbandwidthrequest() function call after the request processing is complete in tbhandledpbandwidthrequest() (Debian Security).

The vulnerability results in a memory leak in the Linux kernel's thunderbolt subsystem, which could potentially lead to resource exhaustion over time if exploited (Ubuntu Security).

The vulnerability has been fixed in various Linux distributions. Debian has addressed the issue in multiple releases including bullseye (5.10.237-1), bookworm (6.1.153-1), trixie (6.12.48-1), and sid (6.16.11-1). Ubuntu has marked most of their releases as 'Not affected' (Debian Security, Ubuntu Security).