CVE-2023-53533
Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe rpi_firmware_get() take reference, we need to release it in error paths as well. Use devm_rpi_firmware_get() helper to handling the resources. Also remove the existing rpi_firmware_put().
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
5.0
References 7
git.kernel.org
- stable/c/1dfa3c9dd27bdc347733d06e980395768520bc3e
- stable/c/0d6a5c9489c8a3d434e685066119c4333476dccd
- stable/c/7acad58049acc6ac148e8b613a6eceeca4bcb4a7
- stable/c/36d087e49dabd28d2c13a7532dac72d625ce69fb
- stable/c/9dbbe9db224c23a60dc7b1e00c701be93328c873
- stable/c/9216aa5cfd86809a2681be3683cd9ac30432de0c
- stable/c/5bca3688bdbc3b58a2894b8671a8e2378efe28bd