vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-53792

nvme-core: fix memory leak in dhchap_ctrl_secret

N/A
Published: December 9, 2025 at 12:00 AM UTC
Updated: June 17, 2026 at 06:46 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_ctrl_secret Free dhchap_secret in nvme_ctrl_dhchap_ctrl_secret_store() before we return when nvme_auth_generate_key() returns error.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.0 ≤ v < 6.1.396.0 ≤ v < 6.3.136.0 ≤ v < 6.4.46.0 ≤ v < 6.56.0f50fff73d620cd6e8f48bc58d4f1c944615a3fea
Vendor states this is fixed in 39b90fc75943406d2bd60fd1ea041aca2559cc5f (fixed)
Vendor states this is fixed in 43d0724d756a13694f612a8a151f835ad6425b93 (fixed)
Vendor states this is fixed in 6ec30a62789913b1bd0f0d44ea4d0d2d5608b1e8 (fixed)
Vendor states this is fixed in 99c2dcc8ffc24e210a3aa05c204d92f3ef460b05 (fixed)
Vendor states this is fixed in 6.0 (unaffected)
Vendor states this is fixed in 6.1.39 (unaffected)
Vendor states this is fixed in 6.3.13 (unaffected)
Vendor states this is fixed in 6.4.4 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (4)

Source: cverecord
https://git.kernel.org/stable/c/43d0724d756a13694f612a8a151f835ad6425b93
Source: cverecord
https://git.kernel.org/stable/c/39b90fc75943406d2bd60fd1ea041aca2559cc5f
Source: cverecord
https://git.kernel.org/stable/c/6ec30a62789913b1bd0f0d44ea4d0d2d5608b1e8
Source: cverecord
https://git.kernel.org/stable/c/99c2dcc8ffc24e210a3aa05c204d92f3ef460b05

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card