CVE-2023-53746

s390/vfio-ap: fix memory leak in vfio_ap device driver

State: Published
Severity: Not scored
Published: Dec 8, 2025
Updated: May 11, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio-ap: fix memory leak in vfio_ap device driver

The device release callback function invoked to release the matrix device uses the dev_get_drvdata(device *dev) function to retrieve the pointer to the vfio_matrix_dev object in order to free its storage. The problem is, this object is not stored as drvdata with the device; since the kfree function will accept a NULL pointer, the memory for the vfio_matrix_dev object is never freed.

Since the device being released is contained within the vfio_matrix_dev object, the container_of macro will be used to retrieve its pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1fde573413b549d52183382e639c1d6ce88f5959 to before 5195de1d5f66b276683240a896783f7f43c4f664Affected 1fde573413b549d52183382e639c1d6ce88f5959 to before ee17dea3072dec0bc34399a32fa884e26342e4eaAffected 1fde573413b549d52183382e639c1d6ce88f5959 to before aa2bff25e9bb10c935c7ffe3d5f5975bdccb1749Affected 1fde573413b549d52183382e639c1d6ce88f5959 to before 6a40fda14b4be3e38f03cc42ffd4efbc64fb3e67Affected 1fde573413b549d52183382e639c1d6ce88f5959 to before 7b6a02f5bf15931464c79dfd487c57f76aae3496Affected 1fde573413b549d52183382e639c1d6ce88f5959 to before 8f8cf767589f2131ae5d40f3758429095c701c84Affected
LinuxLinux	4.20Affected before 4.20Not affected 5.4.240 through 5.4.Not affected 5.10.177 through 5.10.Not affected 5.15.106 through 5.15.Not affected 6.1.23 through 6.1.Not affected 6.2.10 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

1fde573413b549d52183382e639c1d6ce88f5959 to before 5195de1d5f66b276683240a896783f7f43c4f664Affected
1fde573413b549d52183382e639c1d6ce88f5959 to before ee17dea3072dec0bc34399a32fa884e26342e4eaAffected
1fde573413b549d52183382e639c1d6ce88f5959 to before aa2bff25e9bb10c935c7ffe3d5f5975bdccb1749Affected
1fde573413b549d52183382e639c1d6ce88f5959 to before 6a40fda14b4be3e38f03cc42ffd4efbc64fb3e67Affected
1fde573413b549d52183382e639c1d6ce88f5959 to before 7b6a02f5bf15931464c79dfd487c57f76aae3496Affected
1fde573413b549d52183382e639c1d6ce88f5959 to before 8f8cf767589f2131ae5d40f3758429095c701c84Affected

LinuxLinux

4.20Affected
before 4.20Not affected
5.4.240 through 5.4.*Not affected
5.10.177 through 5.10.*Not affected
5.15.106 through 5.15.*Not affected
6.1.23 through 6.1.*Not affected
6.2.10 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.