{"schema_version":"1.9.0","id":"CVE-2023-53852","published":"2025-12-09T01:30:17.449Z","modified":"2026-08-12T03:51:42.924668379Z","related":["SUSE-SU-2026:0263-1","SUSE-SU-2026:0278-1","SUSE-SU-2026:0281-1","SUSE-SU-2026:0293-1","SUSE-SU-2026:0315-1","SUSE-SU-2026:0317-1","SUSE-SU-2026:0411-1","SUSE-SU-2026:0617-1","SUSE-SU-2026:20477-1","SUSE-SU-2026:20498-1","SUSE-SU-2026:20845-1","SUSE-SU-2026:20876-1"],"summary":"nvme-core: fix memory leak in dhchap_secret_store","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-core: fix memory leak in dhchap_secret_store\n\nFree dhchap_secret in nvme_ctrl_dhchap_secret_store() before we return\nfix following kmemleack:-\n\nunreferenced object 0xffff8886376ea800 (size 64):\n  comm \"check\", pid 22048, jiffies 4344316705 (age 92.199s)\n  hex dump (first 32 bytes):\n    44 48 48 43 2d 31 3a 30 30 3a 6e 78 72 35 4b 67  DHHC-1:00:nxr5Kg\n    75 58 34 75 6f 41 78 73 4a 61 34 63 2f 68 75 4c  uX4uoAxsJa4c/huL\n  backtrace:\n    [<0000000030ce5d4b>] __kmalloc+0x4b/0x130\n    [<000000009be1cdc1>] nvme_ctrl_dhchap_secret_store+0x8f/0x160 [nvme_core]\n    [<00000000ac06c96a>] kernfs_fop_write_iter+0x12b/0x1c0\n    [<00000000437e7ced>] vfs_write+0x2ba/0x3c0\n    [<00000000f9491baf>] ksys_write+0x5f/0xe0\n    [<000000001c46513d>] do_syscall_64+0x3b/0x90\n    [<00000000ecf348fe>] entry_SYSCALL_64_after_hwframe+0x72/0xdc\nunreferenced object 0xffff8886376eaf00 (size 64):\n  comm \"check\", pid 22048, jiffies 4344316736 (age 92.168s)\n  hex dump (first 32 bytes):\n    44 48 48 43 2d 31 3a 30 30 3a 6e 78 72 35 4b 67  DHHC-1:00:nxr5Kg\n    75 58 34 75 6f 41 78 73 4a 61 34 63 2f 68 75 4c  uX4uoAxsJa4c/huL\n  backtrace:\n    [<0000000030ce5d4b>] __kmalloc+0x4b/0x130\n    [<000000009be1cdc1>] nvme_ctrl_dhchap_secret_store+0x8f/0x160 [nvme_core]\n    [<00000000ac06c96a>] kernfs_fop_write_iter+0x12b/0x1c0\n    [<00000000437e7ced>] vfs_write+0x2ba/0x3c0\n    [<00000000f9491baf>] ksys_write+0x5f/0xe0\n    [<000000001c46513d>] do_syscall_64+0x3b/0x90\n    [<00000000ecf348fe>] entry_SYSCALL_64_after_hwframe+0x72/0xdc","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f50fff73d620cd6e8f48bc58d4f1c944615a3fea"},{"fixed":"2e9b141307554521d60fecf6bf1d2edc8dd0181d"},{"fixed":"c41ac086d2abaf7527a5685f9c0a1c209ab7e0aa"},{"fixed":"6a5eda5017959541ab82c5d56bcf784b8294e298"},{"fixed":"a836ca33c5b07d34dd5347af9f64d25651d12674"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53852.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.1.39"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.3.13"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.4.0"},{"fixed":"6.4.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53852.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/2e9b141307554521d60fecf6bf1d2edc8dd0181d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6a5eda5017959541ab82c5d56bcf784b8294e298"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a836ca33c5b07d34dd5347af9f64d25651d12674"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c41ac086d2abaf7527a5685f9c0a1c209ab7e0aa"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53852.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53852"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53852.json"}}