5.5

CVE-2023-53687

tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk

In the Linux kernel, the following vulnerability has been resolved:

tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk

When the best clk is searched, we iterate over all possible clk.

If we find a better match, the previous one, if any, needs to be freed.
If a better match has already been found, we still need to free the new
one, otherwise it leaks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 3.3 < 4.14.322
LinuxLinux Kernel Version >= 4.15 < 4.19.291
LinuxLinux Kernel Version >= 4.20 < 5.4.251
LinuxLinux Kernel Version >= 5.5 < 5.10.188
LinuxLinux Kernel Version >= 5.11 < 5.15.121
LinuxLinux Kernel Version >= 5.16 < 6.1.40
LinuxLinux Kernel Version >= 6.2 < 6.4.5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.034
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/933e5b2998bc3a527d15efbf1e97c9e63297aa3c
Patch
https://git.kernel.org/stable/c/01dd8a43a84616c830782166ba3cceb01ad95363
Patch
https://git.kernel.org/stable/c/46574e5a0a2aee41e6ebb979cfe1dbaea8693e16
Patch
https://git.kernel.org/stable/c/1962717c4649e026a4252fe6625175affd28a593
Patch
https://git.kernel.org/stable/c/9dd8091959bc41fee51d0827276a2b982e84adf0
Patch
https://git.kernel.org/stable/c/f0bf102ef9b05d7294bd8d506755465f6867d944
Patch
https://git.kernel.org/stable/c/1f426293fef1c13742b2a685bf7e363f51f6ee03
Patch
https://git.kernel.org/stable/c/832e231cff476102e8204a9e7bddfe5c6154a375
Patch