CVE-2023-52457

serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed

State: Published
Severity: Not scored
Published: Feb 23, 2024
Updated: May 23, 2026
Reserved: Feb 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed

Returning an error code from .remove() makes the driver core emit the little helpful error message:

remove callback returned a non-zero value. This will be ignored.

and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free.

So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2d66412563ef8953e2bac2d98d2d832b3f3f49cd to before b502fb43f7fb55aaf07f6092ab44657595214b93Affected d833cba201adf9237168e19f0d76e4d7aa69f303 to before bc57f3ef8a9eb0180606696f586a6dcfaa175ed0Affected e0db709a58bdeb8966890882261a3f8438c5c9b7 to before 828cd829483f0cda920710997aed79130b0af690Affected e3f0c638f428fd66b5871154b62706772045f91a to before d74173bda29aba58f822175d983d07c8ed335494Affected e3f0c638f428fd66b5871154b62706772045f91a to before 887a558d0298d36297daea039954c39940228d9bAffected e3f0c638f428fd66b5871154b62706772045f91a to before 95e4e0031effad9837af557ecbfd4294a4d8aeeeAffected e3f0c638f428fd66b5871154b62706772045f91a to before ad90d0358bd3b4554f243a425168fc7cebe7d04eAffected 02eed6390dbe61115f3e3f63829c95c611aee67bAffected 5.4.225 to before 5.4.268Affected 5.10.156 to before 5.10.209Affected 5.15.80 to before 5.15.148Affected 6.0.10 to before 6.1Affected
LinuxLinux	6.1Affected before 6.1Not affected 5.4.268 through 5.4.Not affected 5.10.209 through 5.10.Not affected 5.15.148 through 5.15.Not affected 6.1.75 through 6.1.Not affected 6.6.14 through 6.6.Not affected 6.7.2 through 6.7.Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

2d66412563ef8953e2bac2d98d2d832b3f3f49cd to before b502fb43f7fb55aaf07f6092ab44657595214b93Affected
d833cba201adf9237168e19f0d76e4d7aa69f303 to before bc57f3ef8a9eb0180606696f586a6dcfaa175ed0Affected
e0db709a58bdeb8966890882261a3f8438c5c9b7 to before 828cd829483f0cda920710997aed79130b0af690Affected
e3f0c638f428fd66b5871154b62706772045f91a to before d74173bda29aba58f822175d983d07c8ed335494Affected
e3f0c638f428fd66b5871154b62706772045f91a to before 887a558d0298d36297daea039954c39940228d9bAffected
e3f0c638f428fd66b5871154b62706772045f91a to before 95e4e0031effad9837af557ecbfd4294a4d8aeeeAffected
e3f0c638f428fd66b5871154b62706772045f91a to before ad90d0358bd3b4554f243a425168fc7cebe7d04eAffected
02eed6390dbe61115f3e3f63829c95c611aee67bAffected
5.4.225 to before 5.4.268Affected
5.10.156 to before 5.10.209Affected
5.15.80 to before 5.15.148Affected
6.0.10 to before 6.1Affected

LinuxLinux

6.1Affected
before 6.1Not affected
5.4.268 through 5.4.*Not affected
5.10.209 through 5.10.*Not affected
5.15.148 through 5.15.*Not affected
6.1.75 through 6.1.*Not affected
6.6.14 through 6.6.*Not affected
6.7.2 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.