Menu

Star on GitHub · 3.2k

CVE-2023-53793

In the Linux kernel, the following vulnerability has been resolved: perf tool x86: Fix perf_env memory leak Found by leak sanitizer: ``` ==1632594==ERROR: LeakSanitizer: detected memory leaks Di…

Published Dec 9, 2025EPSS 0.20%

Overview

CVE-2023-53793 is a known-severity vulnerability. It was published on December 9, 2025.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

perf tool x86: Fix perf_env memory leak

Found by leak sanitizer:

```

==1632594==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 21 byte(s) in 1 object(s) allocated from:

#0 0x7f2953a7077b in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cpp:439

#1 0x556701d6fbbf in perf_env__read_cpuid util/env.c:369

#2 0x556701d70589 in perf_env__cpuid util/env.c:465

#3 0x55670204bba2 in x86__is_amd_cpu arch/x86/util/env.c:14

#4 0x5567020487a2 in arch__post_evsel_config arch/x86/util/evsel.c:83

#5 0x556701d8f78b in evsel__config util/evsel.c:1366

#6 0x556701ef5872 in evlist__config util/record.c:108

#7 0x556701cd6bcd in test__PERF_RECORD tests/perf-record.c:112

#8 0x556701cacd07 in run_test tests/builtin-test.c:236

#9 0x556701cacfac in test_and_print tests/builtin-test.c:265

#10 0x556701cadddb in __cmd_test tests/builtin-test.c:402

#11 0x556701caf

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Frequently asked questions

What is CVE-2023-53793?

CVE-2023-53793 is a known-severity vulnerability. It was published on December 9, 2025.

How severe is CVE-2023-53793?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2023-53793?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2023-53793?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2023-53793 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.