NetSight
medium5.5

CVE-2023-53687

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk W…

Impact

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk When the best clk is searched, we iterate over all possible clk. If we find a better match, the previous one, if any, needs to be freed. If a better match has already been found, we still need to free the new one, otherwise it leaks.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.3 before 4.14.322
from 4.15 before 4.19.291
from 4.20 before 5.4.251
from 5.5 before 5.10.188
from 5.11 before 5.15.121
from 5.16 before 6.1.40

Weakness classification

References