CVE-2023-52838
fbdev: imsttfb: fix a resource leak in probe
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.19.299, 5.4.261, 5.10.201, 5.15.139, 6.1.63, and 2 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 4.19.291 · fixed in 4.19.299; From 5.4.251 · fixed in 5.4.261; From 5.10.188 · fixed in 5.10.201; From 5.15.116 · fixed in 5.15.139; From 6.1.33 · fixed in 6.1.63; From 4.14.322 · fixed in 4.15; From 6.3.7 · fixed in 6.4
- Linux Linux
6.4
References 8
git.kernel.org
- stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485
- stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d
- stable/c/a4dfebec32ec6d420a5506dd56a7834c91be28e4
- stable/c/8e4b510fe91782522b7ca0ca881b663b5d35e513
- stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d
- stable/c/18d26f9baca7d0d309303e3074a2252b8310884a
- stable/c/b346a531159d08c564a312a9eaeea691704f3c00
- stable/c/aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b