What’s Vulnerable › Vulnerabilities

CVE-2023-53096: interconnect: fix mem leak when freeing nodes

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-02 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: interconnect: fix mem leak when freeing nodes The node link array is allocated when adding links to a node but is not deallocated when nodes are destroyed.

Affected products

• Linux kernel: from 5.1 before 5.4.238; from 5.5 before 5.10.176; from 5.11 before 5.15.104; from 5.16 before 6.1.21; from 6.2 before 6.2.8; 6.3-rc1, 6.3-rc2 — fixed in 5.10.176, 5.15.104, 5.4.238, 6.1.21, 6.2.8

How to fix

Upgrade to a fixed version: Linux kernel 5.10.176, 5.15.104, 5.4.238, 6.1.21. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2e0b13a1827229a02abef97b50ffaf89ba25370a
• https://git.kernel.org/stable/c/3167306455d0fbbbcf08cb25651acc527a86a95e
• https://git.kernel.org/stable/c/a5904f415e1af72fa8fe6665aa4f554dc2099a95
• https://git.kernel.org/stable/c/c1722e4113281fb34e5b4fb5c5387b17cd39a537
• https://git.kernel.org/stable/c/efae80ca13faa94457208852825731da44a788ad
• https://git.kernel.org/stable/c/f1e3a20c60196c37a402c584d0c9de306ba988ce

Get alerted when CVE-2023-53096 or the next vulnerability affects your stack