Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-53441

20
FAUCET Score

CVE-2023-53441 is a memory leak vulnerability in the Linux kernel's BPF cpumap component. Specifically, the cpu_map_update_elem function fails to properly release allocated memory when kthread_stop is called before the kthread's threadfn executes. This affects Linux kernel versions where this specific BPF functionality is present. The vulnerability has a CVSSv3.1 score of 5.5 (Medium), indicating a local attack vector with low attack complexity. A successful exploit could lead to a denial of service (A:H) due to memory exhaustion, but does not impact confidentiality or integrity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE. It is not listed on the CISA KEV catalog.

Impacted Technologies

VendorProductVersion(s)CPE
>= 4.15, < 5.15.121CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.40CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.4.5CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.5CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.14%
Probability of exploitation in next 30 days
EPSS Percentile
3.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0014 is in the 22nd percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-553.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-427.13.1.el9_4
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (1)

redhatCVE-2023-53441Low

kernel: bpf: cpumap: Fix memory leak in cpu_map_update_elem

Sep 18, 2025

References

git.kernel.org / stable/c/4369016497319a9635702da010d02af1ebb1849d
Patch
git.kernel.org / stable/c/a957ac8e0b5ffb5797382a6adbafd005a5f72851
Patch
git.kernel.org / stable/c/b11a9b4f28cb6ff69ef7e69809e5f7fffeac9030
Patch
git.kernel.org / stable/c/d26299f50f5ea8f0aeb5d49e659c31f64233c816
Patch