PT-2025-49652

CVE-2023-53792

·

Published

2023-04-28

·

Updated

2026-10-21

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description A memory leak was identified in the nvme-core component of the Linux kernel, specifically within the dhchap ctrl secret store() function. The issue occurs when nvme auth generate key() returns an error, failing to free the dhchap secret memory before returning. This can lead to a gradual depletion of system memory over time.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1783791447
RHSA-2023:6583
SUSE-SU-2026:0263-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
Found an issue in the description? Have something to add? Feel free to write us 👾