CVE - CVE-2023-53078

CVE-ID
CVE-2023-53078	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() If alua_rtpg_queue() failed from alua_activate(), then 'qdata' is not freed, which will cause following memleak: unreferenced object 0xffff88810b2c6980 (size 32): comm "kworker/u16:2", pid 635322, jiffies 4355801099 (age 1216426.076s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40 39 24 c1 ff ff ff ff 00 f8 ea 0a 81 88 ff ff @9$............. backtrace: [<0000000098f3a26d>] alua_activate+0xb0/0x320 [<000000003b529641>] scsi_dh_activate+0xb2/0x140 [<000000007b296db3>] activate_path_work+0xc6/0xe0 [dm_multipath] [<000000007adc9ace>] process_one_work+0x3c5/0x730 [<00000000c457a985>] worker_thread+0x93/0x650 [<00000000cb80e628>] kthread+0x1ba/0x210 [<00000000a1e61077>] ret_from_fork+0x22/0x30 Fix the problem by freeing 'qdata' in error path.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0d89254a4320eb7de0970c478172f764125c6355 URL:https://git.kernel.org/stable/c/0d89254a4320eb7de0970c478172f764125c6355 MISC:https://git.kernel.org/stable/c/123483df146492ca22b503ae6dacc2ce7c3a3974 URL:https://git.kernel.org/stable/c/123483df146492ca22b503ae6dacc2ce7c3a3974 MISC:https://git.kernel.org/stable/c/1c55982beb80c7d3c30278fc6cfda8496a31dbe6 URL:https://git.kernel.org/stable/c/1c55982beb80c7d3c30278fc6cfda8496a31dbe6 MISC:https://git.kernel.org/stable/c/5c4d71424df34fc23dc5336d09394ce68c849542 URL:https://git.kernel.org/stable/c/5c4d71424df34fc23dc5336d09394ce68c849542 MISC:https://git.kernel.org/stable/c/9311e7a554dffd3823499e309a8b86a5cd1540e5 URL:https://git.kernel.org/stable/c/9311e7a554dffd3823499e309a8b86a5cd1540e5 MISC:https://git.kernel.org/stable/c/a13faca032acbf2699293587085293bdfaafc8ae URL:https://git.kernel.org/stable/c/a13faca032acbf2699293587085293bdfaafc8ae MISC:https://git.kernel.org/stable/c/c09cdf6eb815ee35e55d6c50ac7f63db58bd20b8 URL:https://git.kernel.org/stable/c/c09cdf6eb815ee35e55d6c50ac7f63db58bd20b8 MISC:https://git.kernel.org/stable/c/c110051d335ef7f62ad33474b0c23997fee5bfb5 URL:https://git.kernel.org/stable/c/c110051d335ef7f62ad33474b0c23997fee5bfb5
Assigning CNA
kernel.org
Date Record Created
20250502	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250502)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)