CVE-2023-52662

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52662
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node When ida_alloc_max fails, resources allocated before should be freed, including *res allocated by kmalloc and ttm_resource_init.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf Patch
https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a Patch
https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6 Patch
https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5 Patch
https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce Patch
https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876 Patch
https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf Patch
https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a Patch
https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6 Patch
https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5 Patch
https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce Patch
https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 Jan 2025, 14:55

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf - () https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf - Patch
References () https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a - () https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a - Patch
References () https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6 - () https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6 - Patch
References () https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5 - () https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5 - Patch
References () https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce - () https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce - Patch
References () https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876 - () https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876 - Patch
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf - () https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf -
References () https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a - () https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a -
References () https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6 - () https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6 -
References () https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5 - () https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5 -
References () https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce - () https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce -
References () https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876 - () https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: drm/vmwgfx: soluciona un memleak en vmw_gmrid_man_get_node Cuando falla ida_alloc_max, se deben liberar los recursos asignados anteriormente, incluido *res asignado por kmalloc y ttm_resource_init.

17 May 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-17 14:15

Updated : 2025-01-14 14:55

NVD link : CVE-2023-52662

Mitre link : CVE-2023-52662

CVE.ORG link : CVE-2023-52662

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime