CVE-2023-53050

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in margining Memory for the usb4->margining needs to be relased for the upstream port of the router as well, even though the debugfs directory gets released with the router device removal. Fix this.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*

History

12 Nov 2025, 18:34

Type Values Removed Values Added
CWE CWE-401
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/0b357b360e671688f9bf38ff94300515b68bc247 - () https://git.kernel.org/stable/c/0b357b360e671688f9bf38ff94300515b68bc247 - Patch
References () https://git.kernel.org/stable/c/acec726473822bc6b585961f4ca2a11fa7f28341 - () https://git.kernel.org/stable/c/acec726473822bc6b585961f4ca2a11fa7f28341 - Patch
References () https://git.kernel.org/stable/c/f390095bbd131ec2dfb29792d9f6fd0f0656bfc0 - () https://git.kernel.org/stable/c/f390095bbd131ec2dfb29792d9f6fd0f0656bfc0 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

05 May 2025, 20:54

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Thunderbolt: Se corrige la pérdida de memoria en el margining. La memoria para usb4->margining también debe liberarse para el puerto ascendente del router, aunque el directorio debugfs se libera al eliminar el dispositivo del router. Se soluciona.

02 May 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-02 16:15

Updated : 2025-11-12 18:34


NVD link : CVE-2023-53050

Mitre link : CVE-2023-53050

CVE.ORG link : CVE-2023-53050


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime