CVE-2023-53696: 
Linux Kernel vulnerability analysis and mitigation

A memory leak vulnerability (CVE-2023-53696) was identified in the Linux kernel, specifically in the SCSI qla2xxx driver. The issue was discovered in the qla2x00probeone() function where memory allocated for fabscanrp "scan.l" in qla2x00createhost() is not properly freed when adapter initialization fails (NVD).

The vulnerability manifests as a memory leak in the error-handling path of qla2x00probeone() when the adapter "base_vha" initialization fails. The leaked memory block is 12,288 bytes in size, allocated for port information recording. The issue was detected by kmemleak tool, which reported an unreferenced object at address 0xffffc900003f0000 (NVD).

The vulnerability results in a memory leak in the Linux kernel's SCSI subsystem, which could lead to gradual system memory depletion over time if the affected code path is repeatedly triggered (NVD).

The vulnerability has been fixed by properly freeing the memory of "scan.l" when an error occurs during the adapter initialization process. The fix ensures proper cleanup in the error handling path "probe_failed" (NVD).