CVE-2023-53174 — scsi: core: Fix possible memory leak if device_add() fails
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix possible memory leak if device_add() fails If device_add() returns error, the name allocate…
Published: 2025-09-15 · CVSS: Unscored
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix possible memory leak if device_add() fails If device_add() returns error, the name allocated by dev_set_name() needs be freed. As the comment of device_add() says, put_device() should be used to decrease the reference count in the error path. So fix this by calling put_device(), then the name can be freed in kobject_cleanp().
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7