CVE-2023-53196

MEDIUM

Linux Kernel 5.3 - Use-After-Free in dwc3_qcom_probe

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3_qcom_probe() allocates memory for resource structure which is pointed by parent_res pointer. This memory is not freed. This leads to memory leak. Use stack memory to prevent memory leak. Found by Linux Verification Center (linuxtesting.org) with SVACE.

References (6)

Core 6

Core References

Patch

https://git.kernel.org/stable/c/648a163cff21ea355c8765e882ba8bf66a870a3e

Patch

https://git.kernel.org/stable/c/74f8606ddfa450d2255b4e61472a7632def1e8c4

Patch

https://git.kernel.org/stable/c/b626cd5e4a87a281629e0c2b07519990077c0fbe

Patch

https://git.kernel.org/stable/c/c3b322b84ab5dda7eaca9ded763628b7467734f4

Patch

https://git.kernel.org/stable/c/134a7d4642f11daed6bbc378f930a54dd0322291

Patch

https://git.kernel.org/stable/c/097fb3ee710d4de83b8d4f5589e8ee13e0f0541e

Scores

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 4.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-401

Status published

Products (15)

Linux/Linux < 5.3

Linux/Linux 2bc02355f8ba2c1f108ec8b16a673b467a17228c - 097fb3ee710d4de83b8d4f5589e8ee13e0f0541e

Linux/Linux 2bc02355f8ba2c1f108ec8b16a673b467a17228c - 134a7d4642f11daed6bbc378f930a54dd0322291

Linux/Linux 2bc02355f8ba2c1f108ec8b16a673b467a17228c - 648a163cff21ea355c8765e882ba8bf66a870a3e

Linux/Linux 2bc02355f8ba2c1f108ec8b16a673b467a17228c - 74f8606ddfa450d2255b4e61472a7632def1e8c4

Linux/Linux 2bc02355f8ba2c1f108ec8b16a673b467a17228c - b626cd5e4a87a281629e0c2b07519990077c0fbe

Linux/Linux 2bc02355f8ba2c1f108ec8b16a673b467a17228c - c3b322b84ab5dda7eaca9ded763628b7467734f4

Linux/Linux 5.10.188 - 5.10.*

Linux/Linux 5.15.121 - 5.15.*

Linux/Linux 5.3

... and 5 more

Published Sep 15, 2025

Tracked Since Feb 18, 2026