{"id":"DEBIAN-CVE-2023-53852","details":"In the Linux kernel, the following vulnerability has been resolved:  nvme-core: fix memory leak in dhchap_secret_store  Free dhchap_secret in nvme_ctrl_dhchap_secret_store() before we return fix following kmemleack:-  unreferenced object 0xffff8886376ea800 (size 64):   comm \"check\", pid 22048, jiffies 4344316705 (age 92.199s)   hex dump (first 32 bytes):     44 48 48 43 2d 31 3a 30 30 3a 6e 78 72 35 4b 67  DHHC-1:00:nxr5Kg     75 58 34 75 6f 41 78 73 4a 61 34 63 2f 68 75 4c  uX4uoAxsJa4c/huL   backtrace:     [\u003c0000000030ce5d4b\u003e] __kmalloc+0x4b/0x130     [\u003c000000009be1cdc1\u003e] nvme_ctrl_dhchap_secret_store+0x8f/0x160 [nvme_core]     [\u003c00000000ac06c96a\u003e] kernfs_fop_write_iter+0x12b/0x1c0     [\u003c00000000437e7ced\u003e] vfs_write+0x2ba/0x3c0     [\u003c00000000f9491baf\u003e] ksys_write+0x5f/0xe0     [\u003c000000001c46513d\u003e] do_syscall_64+0x3b/0x90     [\u003c00000000ecf348fe\u003e] entry_SYSCALL_64_after_hwframe+0x72/0xdc unreferenced object 0xffff8886376eaf00 (size 64):   comm \"check\", pid 22048, jiffies 4344316736 (age 92.168s)   hex dump (first 32 bytes):     44 48 48 43 2d 31 3a 30 30 3a 6e 78 72 35 4b 67  DHHC-1:00:nxr5Kg     75 58 34 75 6f 41 78 73 4a 61 34 63 2f 68 75 4c  uX4uoAxsJa4c/huL   backtrace:     [\u003c0000000030ce5d4b\u003e] __kmalloc+0x4b/0x130     [\u003c000000009be1cdc1\u003e] nvme_ctrl_dhchap_secret_store+0x8f/0x160 [nvme_core]     [\u003c00000000ac06c96a\u003e] kernfs_fop_write_iter+0x12b/0x1c0     [\u003c00000000437e7ced\u003e] vfs_write+0x2ba/0x3c0     [\u003c00000000f9491baf\u003e] ksys_write+0x5f/0xe0     [\u003c000000001c46513d\u003e] do_syscall_64+0x3b/0x90     [\u003c00000000ecf348fe\u003e] entry_SYSCALL_64_after_hwframe+0x72/0xdc","modified":"2026-09-15T08:47:26.026115418Z","published":"2025-12-09T16:17:25.797Z","upstream":["CVE-2023-53852"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-53852"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.52-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53852.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53852.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53852.json"}}],"schema_version":"1.9.0"}