CVE-2023-53174

scsi: core: Fix possible memory leak if device_add() fails

State: Published
Severity: Not scored
Published: Sep 15, 2025
Updated: May 11, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: core: Fix possible memory leak if device_add() fails

If device_add() returns error, the name allocated by dev_set_name() needs be freed. As the comment of device_add() says, put_device() should be used to decrease the reference count in the error path. So fix this by calling put_device(), then the name can be freed in kobject_cleanp().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ee959b00c335d7780136c5abda37809191fe52c3 to before 63956ad27a6882f01fea7c69e17823090f4c7b3fAffected ee959b00c335d7780136c5abda37809191fe52c3 to before 06c5340858011aa1195aec43a776e3185fbf7f56Affected ee959b00c335d7780136c5abda37809191fe52c3 to before e12fac07f61caac9c5b186d827658b3470787619Affected ee959b00c335d7780136c5abda37809191fe52c3 to before aa9a76d5ffdecd3b52ac333eb89361b0c9fe04e8Affected ee959b00c335d7780136c5abda37809191fe52c3 to before 6bc7f4c8c27d526f968788b8a985896755b1df35Affected ee959b00c335d7780136c5abda37809191fe52c3 to before b191ff1f075c4875f11271cbf0093e6e044a12aaAffected ee959b00c335d7780136c5abda37809191fe52c3 to before 43c0e16d0c5ec59398b405f4c4aa5a076e656c3fAffected ee959b00c335d7780136c5abda37809191fe52c3 to before 04b5b5cb0136ce970333a9c6cec7e46adba1ea3aAffected
LinuxLinux	2.6.26Affected before 2.6.26Not affected 4.14.323 through 4.14.Not affected 4.19.292 through 4.19.Not affected 5.4.254 through 5.4.Not affected 5.10.191 through 5.10.Not affected 5.15.127 through 5.15.Not affected 6.1.46 through 6.1.Not affected 6.4.11 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

ee959b00c335d7780136c5abda37809191fe52c3 to before 63956ad27a6882f01fea7c69e17823090f4c7b3fAffected
ee959b00c335d7780136c5abda37809191fe52c3 to before 06c5340858011aa1195aec43a776e3185fbf7f56Affected
ee959b00c335d7780136c5abda37809191fe52c3 to before e12fac07f61caac9c5b186d827658b3470787619Affected
ee959b00c335d7780136c5abda37809191fe52c3 to before aa9a76d5ffdecd3b52ac333eb89361b0c9fe04e8Affected
ee959b00c335d7780136c5abda37809191fe52c3 to before 6bc7f4c8c27d526f968788b8a985896755b1df35Affected
ee959b00c335d7780136c5abda37809191fe52c3 to before b191ff1f075c4875f11271cbf0093e6e044a12aaAffected
ee959b00c335d7780136c5abda37809191fe52c3 to before 43c0e16d0c5ec59398b405f4c4aa5a076e656c3fAffected
ee959b00c335d7780136c5abda37809191fe52c3 to before 04b5b5cb0136ce970333a9c6cec7e46adba1ea3aAffected

LinuxLinux

2.6.26Affected
before 2.6.26Not affected
4.14.323 through 4.14.*Not affected
4.19.292 through 4.19.*Not affected
5.4.254 through 5.4.*Not affected
5.10.191 through 5.10.*Not affected
5.15.127 through 5.15.*Not affected
6.1.46 through 6.1.*Not affected
6.4.11 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.