CVE-2023-53174
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-53174
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53174.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-53174
- Downstream
- Published
- 2025-09-15T14:15:39Z
- Modified
- 2025-09-15T19:00:20Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
scsi: core: Fix possible memory leak if device_add() fails
If deviceadd() returns error, the name allocated by devsetname() needs be freed. As the comment of deviceadd() says, putdevice() should be used to decrease the reference count in the error path. So fix this by calling putdevice(), then the name can be freed in kobject_cleanp().
- References
-
- https://git.kernel.org/stable/c/04b5b5cb0136ce970333a9c6cec7e46adba1ea3a
- https://git.kernel.org/stable/c/06c5340858011aa1195aec43a776e3185fbf7f56
- https://git.kernel.org/stable/c/43c0e16d0c5ec59398b405f4c4aa5a076e656c3f
- https://git.kernel.org/stable/c/63956ad27a6882f01fea7c69e17823090f4c7b3f
- https://git.kernel.org/stable/c/6bc7f4c8c27d526f968788b8a985896755b1df35
- https://git.kernel.org/stable/c/aa9a76d5ffdecd3b52ac333eb89361b0c9fe04e8
- https://git.kernel.org/stable/c/b191ff1f075c4875f11271cbf0093e6e044a12aa
- https://git.kernel.org/stable/c/e12fac07f61caac9c5b186d827658b3470787619