CVE-2023-53746 — Release of Invalid Pointer or Reference in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 85.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 8
Description
In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: fix memory leak in vfio_ap device driver
The device release callback function invoked to release the matrix device
uses the dev_get_drvdata(device *dev) function to retrieve the
pointer to the vfio_matrix_dev object in order to free its storage. The
problem is, this object is not stored as drvdata with the device; since the
kfree function will accept a NULL pointer, the memory for the
vfio_matrix_dev object is ne…
Affected Packages4 packages
▶CVEListV5linux/linux1fde573413b549d52183382e639c1d6ce88f5959 — 5195de1d5f66b276683240a896783f7f43c4f664+6
🔴Vulnerability Details
3GHSA▶
GHSA-pfq8-pr42-5qc2: In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-ap: fix memory leak in vfio_ap device driver
The device release callba↗2025-12-08
OSV▶
CVE-2023-53746: In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix memory leak in vfio_ap device driver The device release callback↗2025-12-08