CVE-2023-53779 — Missing Release of Memory after Effective Lifetime in Kernel

3 documents2 sources
Severity
—N/A
No vector
EPSS
No EPSS data
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Linux Kernel
Timeline
PublishedDec 9

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: dln2: Fix memory leak in dln2_probe() When dln2_setup_rx_urbs() in dln2_probe() fails, error out_free forgets to call usb_put_dev() to decrease the refcount of dln2->usb_dev. Fix this by adding usb_put_dev() in the error handling code of dln2_probe().

Affected Packages2 packages

▶Linuxlinux/linux_kernel4.15.0 — 4.19.284+6
▶Debianlinux/linux_kernel< 5.10.191-1+3

🔴Vulnerability Details

3
OSV
CVE-2023-53779: In the Linux kernel, the following vulnerability has been resolved: mfd: dln2: Fix memory leak in dln2_probe() When dln2_setup_rx_urbs() in dln2_probe↗2025-12-09
▶
OSV
mfd: dln2: Fix memory leak in dln2_probe()↗2025-12-09
▶
GHSA
GHSA-hvmv-4574-x69w: In the Linux kernel, the following vulnerability has been resolved: mfd: dln2: Fix memory leak in dln2_probe() When dln2_setup_rx_urbs() in dln2_pro↗2025-12-09
▶