CVE-2023-53512
scsi: mpt3sas: Fix a memory leak
MEDIUM
5.5
CVSS Score
Published: October 1, 2025 at 11:46 AM UTC
Updated: June 17, 2026 at 06:45 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten kfree().
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
4.16 ≤ v < 5.10.1734.16 ≤ v < 5.15.994.16 ≤ v < 6.1.164.16 ≤ v < 6.2.34.16 ≤ v < 6.35.11 ≤ v < 5.15.995.16 ≤ v < 6.1.166.2 ≤ v < 6.2.34.16dbec4c9040edc15442c3ebdb65408aa9d3b82c24
Vendor states this is fixed in 28137ea3eb05a87329a7154a8ff410d9e8bcc0a5 (fixed)
Vendor states this is fixed in 30c7c72b6cf9d8c95f9b219c9d2e4e31b15bebe5 (fixed)
Vendor states this is fixed in 378cc0eec4aa546ce1ae17515e2dfab719d4fb1e (fixed)
Vendor states this is fixed in 54dd96015e8d7a2a07359e2dfebf05b529d1780c (fixed)
Vendor states this is fixed in 847cdbdcd5a24c1eec9595161a23b88fef91ff42 (fixed)
Vendor states this is fixed in 4.16 (unaffected)
Vendor states this is fixed in 5.10.173 (unaffected)
Vendor states this is fixed in 5.15.99 (unaffected)
Vendor states this is fixed in 6.1.16 (unaffected)
Vendor states this is fixed in 6.2.3 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/30c7c72b6cf9d8c95f9b219c9d2e4e31b15bebe5
- https://git.kernel.org/stable/c/378cc0eec4aa546ce1ae17515e2dfab719d4fb1e
- https://git.kernel.org/stable/c/847cdbdcd5a24c1eec9595161a23b88fef91ff42
- https://git.kernel.org/stable/c/28137ea3eb05a87329a7154a8ff410d9e8bcc0a5
- https://git.kernel.org/stable/c/54dd96015e8d7a2a07359e2dfebf05b529d1780c
References (5)
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-401
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card