CVE-2023-53792 nvme-core: fix memory leak in dhchap_ctrl_secret
A memory leak in the Linux kernel NVMe driver allows local attackers to cause denial of service by exhausting system memory.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53792?
CVE-2023-53792 is a memory corruption vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
nvme-core: fix memory leak in dhchap_ctrl_secret
Free dhchap_secret in nvme_ctrl_dhchap_ctrl_secret_store() before we return when nvme_auth_generate_key() returns error.
Which versions are affected by CVE-2023-53792?
How do I fix CVE-2023-53792?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-53792 being exploited?
There is no known exploitation of CVE-2023-53792 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-53792, DEBIAN-CVE-2023-53792, GHSA-fcxh-7g3m-939f, UBUNTU-CVE-2023-53792.