Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2023-53379

usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.14.322, 4.19.291, 5.4.251, 5.10.188, 4.5, and 3 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() Smatch reports: drivers/usb/phy/phy-tahvo.c: tahvo_usb_probe() warn: missing unwind goto? After geting irq, if ret < 0, it will return without error handling to free memory. Just add error handling to fix this problem.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 4.14.247 · fixed in 4.14.322; From 4.19.207 · fixed in 4.19.291; From 5.4.146 · fixed in 5.4.251; From 5.10.65 · fixed in 5.10.188; From 4.4.284 · fixed in 4.5; From 4.9.283 · fixed in 4.10; From 5.13.17 · fixed in 5.14; From 5.14.4 · fixed in 5.15

  • Linux Linux

    5.15

References 8

git.kernel.org