CVE-2023-53435
published 2025-09-18CVE-2023-53435: In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one()…
PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
cassini: Fix a memory leak in the error handling path of cas_init_one()
cas_saturn_firmware_init() allocates some memory using vmalloc(). This
memory is freed in the .remove() function but not it the error handling
path of the probe.
Add the missing vfree() to avoid a memory leak, should an error occur.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16 < 11c0ed097a874156957b515d0ba7e356142eab87 | 11c0ed097a874156957b515d0ba7e356142eab87 |
| linux | linux | >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16 < 60d8e8b88087d68e10c8991a0f6733fa2f963ff0 | 60d8e8b88087d68e10c8991a0f6733fa2f963ff0 |
| linux | linux | >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16 < e20105d967ab5b53ff50a0e5991fe37324d2ba20 | e20105d967ab5b53ff50a0e5991fe37324d2ba20 |
| linux | linux | >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16 < dc61f7582cc92d547d02e141cd66f5d1f4ed8012 | dc61f7582cc92d547d02e141cd66f5d1f4ed8012 |
| linux | linux | >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16 < 234e744d86bd95b381d24546df2dba72804e0219 | 234e744d86bd95b381d24546df2dba72804e0219 |
| linux | linux | >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16 < 172146c26f0c1b86ab4e9ebffc7e06f04229fa17 | 172146c26f0c1b86ab4e9ebffc7e06f04229fa17 |
| linux | linux | >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16 < b8b1a667744741fa7807b09a12797a27f14f3fac | b8b1a667744741fa7807b09a12797a27f14f3fac |
| linux | linux | >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16 < 412cd77a2c24b191c65ea53025222418db09817c | 412cd77a2c24b191c65ea53025222418db09817c |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 2.6.28 < 4.14.316 | 4.14.316 |
| linux | linux_kernel | >= 4.15 < 4.19.284 | 4.19.284 |
| linux | linux_kernel | >= 4.20 < 5.4.244 | 5.4.244 |
| linux | linux_kernel | >= 5.11 < 5.15.113 | 5.15.113 |
| linux | linux_kernel | >= 5.16 < 6.1.30 | 6.1.30 |
| linux | linux_kernel | >= 5.5 < 5.10.181 | 5.10.181 |
| linux | linux_kernel | >= 6.2 < 6.3.4 | 6.3.4 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: cassini: Fix a memory leak in the error handling path of cas_init_one()
vendor_redhat·2025-09-18·CVSS 5.5
CVE-2023-53435 [MEDIUM] kernel: cassini: Fix a memory leak in the error handling path of cas_init_one()
kernel: cassini: Fix a memory leak in the error handling path of cas_init_one()
In the Linux kernel, the following vulnerability has been resolved:
cassini: Fix a memory leak in the error handling path of cas_init_one()
cas_saturn_firmware_init() allocates some memory using vmalloc(). This
memory is freed in the .remove() function but not it the error handling
path of the probe.
Add the missing vfree() to avoid a memory leak, should an error occur.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterpri
Debian
CVE-2023-53435: linux - In the Linux kernel, the following vulnerability has been resolved: cassini: Fi...
vendor_debian·2023·CVSS 5.5
CVE-2023-53435 [MEDIUM] CVE-2023-53435: linux - In the Linux kernel, the following vulnerability has been resolved: cassini: Fi...
In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one() cas_saturn_firmware_init() allocates some memory using vmalloc(). This memory is freed in the .remove() function but not it the error handling path of the probe. Add the missing vfree() to avoid a memory leak, should an error occur.
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
OSV
CVE-2023-53435: In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one() cas_saturn
osv·2025-09-18·CVSS 5.5
CVE-2023-53435 [MEDIUM] CVE-2023-53435: In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one() cas_saturn
In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one() cas_saturn_firmware_init() allocates some memory using vmalloc(). This memory is freed in the .remove() function but not it the error handling path of the probe. Add the missing vfree() to avoid a memory leak, should an error occur.
GHSA
GHSA-qjh2-vwwm-cqj6: In the Linux kernel, the following vulnerability has been resolved:
cassini: Fix a memory leak in the error handling path of cas_init_one()
cas_satu
ghsa_unreviewed·2025-09-18
CVE-2023-53435 [MEDIUM] CWE-401 GHSA-qjh2-vwwm-cqj6: In the Linux kernel, the following vulnerability has been resolved:
cassini: Fix a memory leak in the error handling path of cas_init_one()
cas_satu
In the Linux kernel, the following vulnerability has been resolved:
cassini: Fix a memory leak in the error handling path of cas_init_one()
cas_saturn_firmware_init() allocates some memory using vmalloc(). This
memory is freed in the .remove() function but not it the error handling
path of the probe.
Add the missing vfree() to avoid a memory leak, should an error occur.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/11c0ed097a874156957b515d0ba7e356142eab87https://git.kernel.org/stable/c/172146c26f0c1b86ab4e9ebffc7e06f04229fa17https://git.kernel.org/stable/c/234e744d86bd95b381d24546df2dba72804e0219https://git.kernel.org/stable/c/412cd77a2c24b191c65ea53025222418db09817chttps://git.kernel.org/stable/c/60d8e8b88087d68e10c8991a0f6733fa2f963ff0https://git.kernel.org/stable/c/b8b1a667744741fa7807b09a12797a27f14f3fachttps://git.kernel.org/stable/c/dc61f7582cc92d547d02e141cd66f5d1f4ed8012https://git.kernel.org/stable/c/e20105d967ab5b53ff50a0e5991fe37324d2ba20
2025-09-18
Published