CVE-2023-53792: nvme-core: fix memory leak in dhchap_ctrl_secret

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-09 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_ctrl_secret Free dhchap_secret in nvme_ctrl_dhchap_ctrl_secret_store() before we return when nvme_auth_generate_key() returns error.

Affected products

Linux kernel: 6.0 — fixed in 6.5

How to fix

Upgrade to a fixed version: Linux kernel 6.5. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/39b90fc75943406d2bd60fd1ea041aca2559cc5f
https://git.kernel.org/stable/c/43d0724d756a13694f612a8a151f835ad6425b93
https://git.kernel.org/stable/c/6ec30a62789913b1bd0f0d44ea4d0d2d5608b1e8
https://git.kernel.org/stable/c/99c2dcc8ffc24e210a3aa05c204d92f3ef460b05

Get alerted when CVE-2023-53792 or the next vulnerability affects your stack