CVE-2023-53852

A memory leak vulnerability was found in the NVMe core driver in the Linux kernel. In nvme_ctrl_dhchap_secret_store(), the dhchap_secret buffer is not freed before returning in certain code paths, causing memory to be leaked each time the secret is stored. This can lead to memory exhaustion over time with repeated secret store operations.

This is a memory leak in the NVMe DH-HMAC-CHAP authentication subsystem. The impact is limited to systems using NVMe-oF (NVMe over Fabrics) with DH-HMAC-CHAP authentication enabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.