CVE Database›Document archive›CVE-2023-53115

CVE-2023-53115

kernel: scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc()

Loading…

Severity

Low

Red Hat Product Security

4.4

CVSS 3.1

Review impact separately from score.

Published · May 2, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc()

Don't allocate memory again when IOC is being reinitialized.

Statement

A memory leak was fixed in mpi3mr_init_ioc() where buffers were reallocated without freeing previously allocated ones during IOC re-initialization. This could lead to kernel memory leaks if the controller is repeatedly reset or reinitialized. Triggering this flaw requires privileged access (e.g., root) and physical or emulated access to the SCSI hardware or virtualized adapter.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE not specified