CVE-2023-53132: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability (CVE-2023-53132) was identified in the Linux kernel's SCSI subsystem, specifically affecting the mpi3mr driver. The vulnerability was published on May 2, 2025, and involves improper memory management in the mpi3mrhbaport during the mpi3mr_remove() function execution (NVD, CVE).

The vulnerability exists in the Linux kernel's SCSI subsystem, specifically in the mpi3mr driver. The issue occurs due to improper memory management where mpi3mrhbaport is not properly freed during the driver removal process. The fix involves adding proper memory deallocation by freeing mpi3mrhbaport at the .remove function (Wiz).

The vulnerability results in a memory leak in the Linux kernel's SCSI subsystem, which could potentially lead to system resource exhaustion over time. This could affect system stability and performance in environments using the affected mpi3mr driver (Wiz).

The vulnerability has been fixed in various Linux distributions. Debian has addressed this in multiple releases: bullseye (5.10.234-1), bookworm (6.1.135-1), trixie (6.12.22-1), and sid (6.12.25-1). Users should update their systems to the patched versions (Debian Tracker).