CVE-2023-52838 - fbdev: imsttfb: fix a resource leak in probe · CoreCVE

Back Back to CVE browser

MEDIUM

fbdev: imsttfb: fix a resource leak in probe

Published May 21, 2024

6.2

MEDIUM

CVSS 3.1

EPSS 0.25%

Description

I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
  -
- Version
  
  Status
  affected
  Constraints
  -
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  6.4
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <6.4
- Version
  4.19.299
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  5.10.201
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.139
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.4.261
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.1.63
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.5.12
  Status
  unaffected
  Constraints
  <=6.5.*
- Version
  6.6.2
  Status
  unaffected
  Constraints
  <=6.6.*
- Version
  6.7
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
	affected
	affected	-
	affected	-
	affected
	affected
	affected
	affected
	affected
	affected
	affected

affected

Version	Status	Constraints
6.4	affected	-
0	unaffected	<6.4
4.19.299	unaffected	<=4.19.*
5.10.201	unaffected	<=5.10.*
5.15.139	unaffected	<=5.15.*
5.4.261	unaffected	<=5.4.*
6.1.63	unaffected	<=6.1.*
6.5.12	unaffected	<=6.5.*
6.6.2	unaffected	<=6.6.*
6.7	unaffected	<=*

Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-402

CWE-416

Use After Free

References (14)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2023-52838		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2282761		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59644		Advisory
https://git.kernel.org/stable/c/18d26f9baca7d0d309303e3074a2252b8310884a		Patch
https://git.kernel.org/stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485		Patch
https://git.kernel.org/stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d		Patch
https://git.kernel.org/stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d		Patch
https://git.kernel.org/stable/c/8e4b510fe91782522b7ca0ca881b663b5d35e513		Patch
https://git.kernel.org/stable/c/a4dfebec32ec6d420a5506dd56a7834c91be28e4		Patch
https://git.kernel.org/stable/c/aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b		Patch
https://git.kernel.org/stable/c/b346a531159d08c564a312a9eaeea691704f3c00		Patch
https://lore.kernel.org/linux-cve-announce/2024052110-CVE-2023-52838-be44@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52838
https://www.cve.org/CVERecord?id=CVE-2023-52838

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Linux

Published May 21, 2024

Updated May 23, 2026

Reserved May 21, 2024

Link CVE-2023-52838

CISA Vulnrichment

Updated Jun 17, 2024

Status Analyzed

Modified Jun 17, 2026

Link CVE-2023-52838

Severity Low

Public date May 21, 2024

Links CVE-2023-52838 - Bugzilla

Assigner Linux

Published May 21, 2024

Updated May 23, 2026

Exploited since n/a

Link EUVD-2023-59644

EUVD-2023-59644