NetSight
IP …
medium5.5

CVE-2023-53435

In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one() cas_saturn_firmware…

Impact

In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one() cas_saturn_firmware_init() allocates some memory using vmalloc(). This memory is freed in the .remove() function but not it the error handling path of the probe. Add the missing vfree() to avoid a memory leak, should an error occur.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.28 before 4.14.316
from 4.15 before 4.19.284
from 4.20 before 5.4.244
from 5.5 before 5.10.181
from 5.11 before 5.15.113
from 5.16 before 6.1.30

Weakness classification

CWE-401

References