CVE-2023-53436: scsi: snic: Fix possible memory leak if device_add() fails
In the Linux kernel, the following vulnerability has been resolved:
scsi: snic: Fix possible memory leak if deviceadd() fails
If deviceadd() returns error, the name allocated by devsetname() needs be freed. As the comment of deviceadd() says, putdevice() should be used to give up the reference in the error path. So fix this by calling putdevice(), then the name can be freed in kobjectcleanp().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53436?
CVE-2023-53436 is classified as a low severity vulnerability in the Linux kernel.
How do I fix CVE-2023-53436?
To mitigate CVE-2023-53436, update the Linux kernel to the latest available version that addresses this vulnerability.
What functionality is affected by CVE-2023-53436?
CVE-2023-53436 affects the SCSI subsystem in the Linux kernel, particularly during the device_add() function.
Can CVE-2023-53436 lead to system instability?
Yes, CVE-2023-53436 could potentially lead to memory leaks, which may impact system stability over time.
Is CVE-2023-53436 a remote exploit?
No, CVE-2023-53436 does not represent a remote exploit; it is related to internal kernel memory handling.