CVE-2023-52838

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52838
In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

6.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/18d26f9baca7d0d309303e3074a2252b8310884a
https://git.kernel.org/stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485
https://git.kernel.org/stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d
https://git.kernel.org/stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d
https://git.kernel.org/stable/c/8e4b510fe91782522b7ca0ca881b663b5d35e513
https://git.kernel.org/stable/c/a4dfebec32ec6d420a5506dd56a7834c91be28e4
https://git.kernel.org/stable/c/aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b
https://git.kernel.org/stable/c/b346a531159d08c564a312a9eaeea691704f3c00
https://git.kernel.org/stable/c/18d26f9baca7d0d309303e3074a2252b8310884a
https://git.kernel.org/stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485
https://git.kernel.org/stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d
https://git.kernel.org/stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d
https://git.kernel.org/stable/c/8e4b510fe91782522b7ca0ca881b663b5d35e513
https://git.kernel.org/stable/c/a4dfebec32ec6d420a5506dd56a7834c91be28e4
https://git.kernel.org/stable/c/aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b
https://git.kernel.org/stable/c/b346a531159d08c564a312a9eaeea691704f3c00
Configurations

No configuration.

History

04 Dec 2024, 18:15

Type Values Removed Values Added
CWE CWE-416
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.2

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: fbdev: imsttfb: corrige una fuga de recursos en la sonda. He reescrito el manejo de errores, pero el error es que si init_imstt() falla, debemos llamar a iounmap(par-> cmap_regs).
References () https://git.kernel.org/stable/c/18d26f9baca7d0d309303e3074a2252b8310884a - () https://git.kernel.org/stable/c/18d26f9baca7d0d309303e3074a2252b8310884a -
References () https://git.kernel.org/stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485 - () https://git.kernel.org/stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485 -
References () https://git.kernel.org/stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d - () https://git.kernel.org/stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d -
References () https://git.kernel.org/stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d - () https://git.kernel.org/stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d -
References () https://git.kernel.org/stable/c/8e4b510fe91782522b7ca0ca881b663b5d35e513 - () https://git.kernel.org/stable/c/8e4b510fe91782522b7ca0ca881b663b5d35e513 -
References () https://git.kernel.org/stable/c/a4dfebec32ec6d420a5506dd56a7834c91be28e4 - () https://git.kernel.org/stable/c/a4dfebec32ec6d420a5506dd56a7834c91be28e4 -
References () https://git.kernel.org/stable/c/aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b - () https://git.kernel.org/stable/c/aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b -
References () https://git.kernel.org/stable/c/b346a531159d08c564a312a9eaeea691704f3c00 - () https://git.kernel.org/stable/c/b346a531159d08c564a312a9eaeea691704f3c00 -

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2024-12-04 18:15

NVD link : CVE-2023-52838

Mitre link : CVE-2023-52838

CVE.ORG link : CVE-2023-52838

JSON object : View

Products Affected

No product.

CWE
CWE-416

Use After Free