CVE-2023-53852
Description
In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_secret_store Free dhchap_secret in nvme_ctrl_dhchap_secret_store() before we return fix following kmemleack:- unreferenced object 0xffff8886376ea800 (size 64): comm "check", pid 22048, jiffies 4344316705 (age 92.199s) hex dump (first 32 bytes): 44 48 48 43 2d 31 3a 30 30 3a 6e 78 72 35 4b 67 DHHC-1:00:nxr5Kg 75 58 34 75 6f 41 78 73 4a 61 34 63 2f 68 75 4c uX4uoAxsJa4c/huL backtrace: [<0000000030ce5d4b>] __kmalloc+0x4b/0x130 [<000000009be1cdc1>] nvme_ctrl_dhchap_secret_store+0x8f/0x160 [nvme_core] [<00000000ac06c96a>] kernfs_fop_write_iter+0x12b/0x1c0 [<00000000437e7ced>] vfs_write+0x2ba/0x3c0 [<00000000f9491baf>] ksys_write+0x5f/0xe0 [<000000001c46513d>] do_syscall_64+0x3b/0x90 [<00000000ecf348fe>] entry_SYSCALL_64_after_hwframe+0x72/0xdc unreferenced object 0xffff8886376eaf00 (size 64): comm "check", pid 22048, jiffies 4344316736 (age 92.168s) hex dump (first 32 bytes): 44 48 48 43 2d 31 3a 30 30 3a 6e 78 72 35 4b 67 DHHC-1:00:nxr5Kg 75 58 34 75 6f 41 78 73 4a 61 34 63 2f 68 75 4c uX4uoAxsJa4c/huL backtrace: [<0000000030ce5d4b>] __kmalloc+0x4b/0x130 [<000000009be1cdc1>] nvme_ctrl_dhchap_secret_store+0x8f/0x160 [nvme_core] [<00000000ac06c96a>] kernfs_fop_write_iter+0x12b/0x1c0 [<00000000437e7ced>] vfs_write+0x2ba/0x3c0 [<00000000f9491baf>] ksys_write+0x5f/0xe0 [<000000001c46513d>] do_syscall_64+0x3b/0x90 [<00000000ecf348fe>] entry_SYSCALL_64_after_hwframe+0x72/0xdc
How to fix
- Linux Linux2e9b141307554521d60fecf6bf1d2edc8dd0181d, c41ac086d2abaf7527a5685f9c0a1c209ab7e0aa, 6a5eda5017959541ab82c5d56bcf784b8294e298, a836ca33c5b07d34dd5347af9f64d25651d12674 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f50fff73d620cd6e8f48bc58d4f1c944615a3fea ≤ v < 2e9b141307554521d60fecf6bf1d2edc8dd0181d, f50fff73d620cd6e8f48bc58d4f1c944615a3fea ≤ v < c41ac086d2abaf7527a5685f9c0a1c209ab7e0aa, f50fff73d620cd6e8f48bc58d4f1c944615a3fea ≤ v < 6a5eda5017959541ab82c5d56bcf784b8294e298, f50fff73d620cd6e8f48bc58d4f1c944615a3fea ≤ v < a836ca33c5b07d34dd5347af9f64d25651d12674, 6.0 | 2e9b141307554521d60fecf6bf1d2edc8dd0181d, c41ac086d2abaf7527a5685f9c0a1c209ab7e0aa, 6a5eda5017959541ab82c5d56bcf784b8294e298, a836ca33c5b07d34dd5347af9f64d25651d12674 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.