CVE-2023-53196

low-risk
Published 2025-09-15

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3_qcom_probe() allocates memory for resource structure which is pointed by parent_res pointer. This memory is not freed. This leads to memory leak. Use stack memory to prevent memory leak. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (6)

Patch https://git.kernel.org/stable/c/097fb3ee710d4de83b8d4f5589e8ee13e0f0541e
Patch https://git.kernel.org/stable/c/134a7d4642f11daed6bbc378f930a54dd0322291
Patch https://git.kernel.org/stable/c/648a163cff21ea355c8765e882ba8bf66a870a3e
Patch https://git.kernel.org/stable/c/74f8606ddfa450d2255b4e61472a7632def1e8c4
Patch https://git.kernel.org/stable/c/b626cd5e4a87a281629e0c2b07519990077c0fbe
Patch https://git.kernel.org/stable/c/c3b322b84ab5dda7eaca9ded763628b7467734f4
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal