BaseFortify

Publication date: 2025-10-04

Last updated on: 2026-03-21

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if dev_set_name() fails When dev_set_name() fails, zcdn_create() doesn't free the newly allocated resources. Do it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-04

Last Modified

2026-03-21

Generated

2026-07-06

AI Q&A

2025-10-04

EPSS Evaluated

2026-07-05

NVD

CVE-2023-53568

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability occurs in the Linux kernel's s390/zcrypt component. When the function dev_set_name() fails, the function zcdn_create() does not free the newly allocated resources, leading to a memory leak. The fix ensures that these resources are properly freed if dev_set_name() fails.

Impact Analysis

The vulnerability can cause memory leaks in the Linux kernel when dev_set_name() fails in the s390/zcrypt component. Over time, this could lead to increased memory usage and potentially degrade system performance or stability.

Hi! I’m here to help you understand CVE-2023-53568. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70