CVE-2023-53126
published 2025-05-02CVE-2023-53126: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() Free mrioc->sas_hba.phy at…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.17%
7.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
Free mrioc->sas_hba.phy at .remove.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.25-1 (bookworm) | linux 6.1.25-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 42fc9fee116fc6a225a1f738adf86689d5c39d49 < 480aae2f30637b5140e9c7a9b10298e538df2b5e | 480aae2f30637b5140e9c7a9b10298e538df2b5e |
| linux | linux | >= 42fc9fee116fc6a225a1f738adf86689d5c39d49 < c60a7c7508645a9f36e4a18a5f548fb79378acd1 | c60a7c7508645a9f36e4a18a5f548fb79378acd1 |
| linux | linux | >= 42fc9fee116fc6a225a1f738adf86689d5c39d49 < d4caa1a4255cc44be56bcab3db2c97c632e6cc10 | d4caa1a4255cc44be56bcab3db2c97c632e6cc10 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 6.1 < 6.1.21 | 6.1.21 |
| linux | linux_kernel | >= 6.2 < 6.2.8 | 6.2.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
vendor_redhat·2025-05-02·CVSS 5.5
CVE-2023-53126 [MEDIUM] kernel: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
kernel: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
Free mrioc->sas_hba.phy at .remove.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 9) - Fix deferred
Debian
CVE-2023-53126: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3m...
vendor_debian·2023·CVSS 5.5
CVE-2023-53126 [MEDIUM] CVE-2023-53126: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3m...
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() Free mrioc->sas_hba.phy at .remove.
Scope: local
bookworm: resolved (fixed in 6.1.25-1)
bullseye: resolved
forky: resolved (fixed in 6.1.25-1)
sid: resolved (fixed in 6.1.25-1)
trixie: resolved (fixed in 6.1.25-1)
OSV
CVE-2023-53126: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sas_hba
osv·2025-05-02·CVSS 5.5
CVE-2023-53126 [MEDIUM] CVE-2023-53126: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sas_hba
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() Free mrioc->sas_hba.phy at .remove.
GHSA
GHSA-w9c2-jf2x-m4cc: In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix sas_hba
ghsa_unreviewed·2025-05-02
CVE-2023-53126 [MEDIUM] CWE-401 GHSA-w9c2-jf2x-m4cc: In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix sas_hba
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()
Free mrioc->sas_hba.phy at .remove.
No detection rules found.
No public exploits indexed.
2025-05-02
Published