CVE-2023-53512
MEDIUM severity · CVSS 5.5 · CWE-401
5.5CVSS MEDIUM
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten kfree().
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/28137ea3eb05a87329a7154a8ff410d9e8bcc0a5 ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/28137ea3eb05a87329a7154a8ff410d9e8bcc0a5Patch
- https://git.kernel.org/stable/c/30c7c72b6cf9d8c95f9b219c9d2e4e31b15bebe5Patch
- https://git.kernel.org/stable/c/378cc0eec4aa546ce1ae17515e2dfab719d4fb1ePatch
- https://git.kernel.org/stable/c/54dd96015e8d7a2a07359e2dfebf05b529d1780cPatch
- https://git.kernel.org/stable/c/847cdbdcd5a24c1eec9595161a23b88fef91ff42Patch