What’s Vulnerable › Vulnerabilities

CVE-2023-53196: usb: dwc3: qcom: Fix potential memory leak

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-15 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3_qcom_probe() allocates memory for resource structure which is pointed by parent_res pointer. This memory is not freed. This leads to memory leak. Use stack memory to prevent memory leak. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

• Linux kernel: from 5.3 before 5.4.251; from 5.5 before 5.10.188; from 5.11 before 5.15.121; from 5.16 before 6.1.39; from 6.2 before 6.4.4 — fixed in 5.10.188, 5.15.121, 5.4.251, 6.1.39, 6.4.4

How to fix

Upgrade to a fixed version: Linux kernel 5.10.188, 5.15.121, 5.4.251, 6.1.39. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/097fb3ee710d4de83b8d4f5589e8ee13e0f0541e
• https://git.kernel.org/stable/c/134a7d4642f11daed6bbc378f930a54dd0322291
• https://git.kernel.org/stable/c/648a163cff21ea355c8765e882ba8bf66a870a3e
• https://git.kernel.org/stable/c/74f8606ddfa450d2255b4e61472a7632def1e8c4
• https://git.kernel.org/stable/c/b626cd5e4a87a281629e0c2b07519990077c0fbe
• https://git.kernel.org/stable/c/c3b322b84ab5dda7eaca9ded763628b7467734f4

Get alerted when CVE-2023-53196 or the next vulnerability affects your stack