CVE-2023-52652

NTB: fix possible name leak in ntb_register_device()

State: Published
Severity: Not scored
Published: May 1, 2024
Updated: May 11, 2026
Reserved: Mar 6, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

NTB: fix possible name leak in ntb_register_device()

If device_register() fails in ntb_register_device(), the device name allocated by dev_set_name() should be freed. As per the comment in device_register(), callers should use put_device() to give up the reference in the error path. So fix this by calling put_device() in the error path so that the name can be freed in kobject_cleanup().

As a result of this, put_device() in the error path of ntb_register_device() is removed and the actual error is returned.

[mani: reworded commit message]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before a62b9f3d7bbfac874cc0c638bc1776dcf1f8ec06Affected a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before 6632a54ac8057cc0b0d789c6f73883e871bcd25cAffected a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before a039690d323221eb5865f1f31db3ec264e7a14b6Affected a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before e8025439ef8e16029dc313d78a351ef192469b7bAffected a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before 913421f9f7fd8324dcc41753d0f28b52e177ef04Affected a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before aebfdfe39b9327a3077d0df8db3beb3160c9bdd0Affected
LinuxLinux	4.2Affected before 4.2Not affected 5.15.153 through 5.15.Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before a62b9f3d7bbfac874cc0c638bc1776dcf1f8ec06Affected
a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before 6632a54ac8057cc0b0d789c6f73883e871bcd25cAffected
a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before a039690d323221eb5865f1f31db3ec264e7a14b6Affected
a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before e8025439ef8e16029dc313d78a351ef192469b7bAffected
a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before 913421f9f7fd8324dcc41753d0f28b52e177ef04Affected
a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b to before aebfdfe39b9327a3077d0df8db3beb3160c9bdd0Affected

LinuxLinux

4.2Affected
before 4.2Not affected
5.15.153 through 5.15.*Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.