{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2023-53800 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2023-53800 is a high-severity use after free vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2023-53800 and fix it if it is affected.\n\nWhat it is: CVE-2023-53800 is a high-severity use after free vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2023-53800 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2023-53800/ (Markdown: https://insights.sbomify.com/CVE-2023-53800/index.md)","id":"CVE-2023-53800","markdown":"https://insights.sbomify.com/CVE-2023-53800/index.md","name":"CVE-2023-53800","record":{"aliases":["BELL-CVE-2023-53800","DEBIAN-CVE-2023-53800","GHSA-7jjf-hg6r-x4hg","UBUNTU-CVE-2023-53800"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["code_execution","privilege_escalation"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Linux kernel UBI","requires_auth":"low_privilege","summary":"A use-after-free vulnerability in the Linux kernel UBI driver allows local attackers to potentially execute arbitrary code or escalate privileges via volume resizing operations.","user_interaction":"not_required","vuln_class":"use_after_free"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[],"cvss":{"score":7.8,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nubi: Fix use-after-free when volume resizing failed\n\nThere is an use-after-free problem reported by KASAN:\n  ==================================================================\n  BUG: KASAN: use-after-free in ubi_eba_copy_table+0x11f/0x1c0 [ubi]\n  Read of size 8 at addr ffff888101eec008 by task ubirsvol/4735\n\n  CPU: 2 PID: 4735 Comm: ubirsvol\n  Not tainted 6.1.0-rc1-00003-g84fa3304a7fc-dirty #14\n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),\n  BIOS 1.14.0-1.fc33 04/01/2014\n  Call Trace:\n   \u003cTASK\u003e\n   dump_stack_lvl+0x34/0x44\n   print_report+0x171/0x472\n   kasan_report+0xad/0x130\n   ubi_eba_copy_table+0x11f/0x1c0 [ubi]\n   ubi_resize_volume+0x4f9/0xbc0 [ubi]\n   ubi_cdev_ioctl+0x701/0x1850 [ubi]\n   __x64_sys_ioctl+0x11d/0x170\n   do_syscall_64+0x35/0x80\n   entry_SYSCALL_64_after_hwframe+0x46/0xb0\n   \u003c/TASK\u003e\n\nWhen ubi_change_vtbl_record() returns an error in ubi_resize_volume(),\n\"new_eba_tbl\" will be freed on error handing path, but it is holded\nby \"vol-\u003eeba_tbl\" in ubi_eba_replace_table(). It means that the liftcycle\nof \"vol-\u003eeba_tbl\" and \"vol\" are different, so when resizing volume in\nnext time, it causing an use-after-free fault.\n\nFix it by not freeing \"new_eba_tbl\" after it replaced in\nubi_eba_replace_table(), while will be freed in next volume resizing.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"ubi: Fix use-after-free when volume resizing failed","id":"CVE-2023-53800","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"use_after_free","year":"2023"},"n_packages":0,"n_references":8,"next":{"headline":"iommu/sprd: Release dma buffer to avoid memory leak","id":"CVE-2023-53801"},"packages":[],"prev":{"headline":"crypto: api - Use work queue in crypto_destroy_instance","id":"CVE-2023-53799"},"products":["Linux"],"published":"2025-12-09","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2026-10-15","vendors":["Linux"]},"summary":"A use-after-free vulnerability in the Linux kernel UBI driver allows local attackers to potentially execute arbitrary code or escalate privileges via volume resizing operations.","url":"https://insights.sbomify.com/CVE-2023-53800/"}