{"cve":"CVE-2023-53696","nvd":{"published":"2025-10-22T14:15:44.113","modified":"2026-10-28T19:10:00.193","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix memory leak in qla2x00_probe_one()\n\nThere is a memory leak reported by kmemleak:\n\n  unreferenced object 0xffffc900003f0000 (size 12288):\n    comm \"modprobe\", pid 19117, jiffies 4299751452 (age 42490.264s)\n    hex dump (first 32 bytes):\n      00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n      00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    backtrace:\n      [<00000000629261a8>] __vmalloc_node_range+0xe56/0x1110\n      [<0000000001906886>] __vmalloc_node+0xbd/0x150\n      [<000000005bb4dc34>] vmalloc+0x25/0x30\n      [<00000000a2dc1194>] qla2x00_create_host+0x7a0/0xe30 [qla2xxx]\n      [<0000000062b14b47>] qla2x00_probe_one+0x2eb8/0xd160 [qla2xxx]\n      [<00000000641ccc04>] local_pci_probe+0xeb/0x1a0\n\nThe root cause is traced to an error-handling path in qla2x00_probe_one()\nwhen the adapter \"base_vha\" initialize failed. The fab_scan_rp \"scan.l\" is\nused to record the port information and it is allocated in\nqla2x00_create_host(). However, it is not released in the error handling\npath \"probe_failed\".\n\nFix this by freeing the memory of \"scan.l\" when an error occurs in the\nadapter initialization process.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/44374911ac63f769c442f56fdfadea673c5f4425","https://git.kernel.org/stable/c/582e35e97318ccd9c81774bac08938291679525f","https://git.kernel.org/stable/c/85ade4010e13ef152ea925c74d94253db92e5428","https://git.kernel.org/stable/c/ae73c4dd48f2c79d515d509a0cbe9efb0a197f44"],"products":[],"source":"nvd","synced_at":"2026-10-28T19:37:43.506563291+00:00"},"epss":{"cve":"CVE-2023-53696","score":0.00214,"percentile":0.11696,"date":"2026-10-28"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}