CVE-2023-53746

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio-ap: fix memory leak in vfio_ap device driver

The device release callback function invoked to release the matrix device uses the dev_get_drvdata(device *dev) function to retrieve the pointer to the vfio_matrix_dev object in order to free its storage. The problem is, this object is not stored as drvdata with the device; since the kfree function will accept a NULL pointer, the memory for the vfio_matrix_dev object is never freed.

Since the device being released is contained within the vfio_matrix_dev object, the container_of macro will be used to retrieve its pointer.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 1fde573413b549d52183382e639c1d6ce88f5959, < 5195de1d5f66b276683240a896783f7f43c4f664; >= 1fde573413b549d52183382e639c1d6ce88f5959, < ee17dea3072dec0bc34399a32fa884e26342e4ea; >= 1fde573413b549d52183382e639c1d6ce88f5959, < aa2bff25e9bb10c935c7ffe3d5f5975bdccb1749; >= 1fde573413b549d52183382e639c1d6ce88f5959, < 6a40fda14b4be3e38f03cc42ffd4efbc64fb3e67; >= 1fde573413b549d52183382e639c1d6ce88f5959, < 7b6a02f5bf15931464c79dfd487c57f76aae3496; >= 1fde573413b549d52183382e639c1d6ce88f5959, < 8f8cf767589f2131ae5d40f3758429095c701c84
LinuxLinux4.20

References

Timeline

Published
Dec 8, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-537477.8In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoiCVE-2023-537487.1In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix potential array out-of-bounds in decoder qCVE-2023-53756.1Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.CVE-2023-53750In the Linux kernel, the following vulnerability has been resolved: pinctrl: freescale: Fix a memory out of bounds when num_configs is 1 TCVE-2023-537519.8In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname TCVE-2023-537527.8In the Linux kernel, the following vulnerability has been resolved: net: deal with integer overflows in kmalloc_reserve() Blamed commit chCVE-2023-537537.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix mapping to non-allocated address [Why] There is aCVE-2023-53754In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() When if_tyCVE-2023-53755In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: check for null desc before calling pt_cmd_callback RCVE-2023-53756In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized current_vmcs KVM enables 'EnlCVE-2023-53757In the Linux kernel, the following vulnerability has been resolved: irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe of_irq_fCVE-2023-53758In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .re