CVE-2023-53670

nvme-core: fix dev_pm_qos memleak

published October 7, 2025

CVSS
—
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nvme-core: fix dev_pm_qos memleak

Call dev_pm_qos_hide_latency_tolerance() in the error unwind patch to

avoid following kmemleak:-

blktests (master) # kmemleak-clear; ./check nvme/044;

blktests (master) # kmemleak-scan ; kmemleak-show

nvme/044 (Test bi-directional authentication) [passed]

runtime 2.111s ... 2.124s

unreferenced object 0xffff888110c46240 (size 96):

comm "nvme", pid 33461, jiffies 4345365353 (age 75.586s)

hex dump (first 32 bytes):

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

backtrace:

[<0000000069ac2cec>] kmalloc_trace+0x25/0x90

[<000000006acc66d5>] dev_pm_qos_update_user_latency_tolerance+0x6f/0x100

[<00000000cc376ea7>] nvme_init_ctrl+0x38e/0x410 [nvme_core]

[<000000007df61b4b>] 0xffffffffc05e88b3

[<00000000d152b985>] 0xffffffffc05744cb

[<00000000f04a4041>] vfs_write+0xc5/0x3c0

[<00000000f9491baf>] ksys_write+0x5f/0xe0

[<000000001c46513d>] do_syscall_64+0x3b/0x90

[<00000000ecf348fe>] entry_SYSCALL_64_after_hwframe+0x72/0xdc

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Published
2025-10-07T15:21Z
EPSS history
Timeline
  • 07 OCT 15:21Z
    nvme-core: fix dev_pm_qos memleak
    cvelistv5