CVE-2023-52838

fbdev: imsttfb: fix a resource leak in probe

State: Published
Severity: 6.2 Medium
Published: May 21, 2024
Updated: May 23, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: imsttfb: fix a resource leak in probe

I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	7f683f286a2196bd4d2da420a3194f5ba0269d8c to before 382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485Affected 815c95d82b79bb32e9aa7c95c6ac7cb1c92612cd to before 6c66d737b2726ac7784269ddf32a31634f8f269dAffected 2bf70b88cc358a437db376826f92c8dcf9c23587 to before a4dfebec32ec6d420a5506dd56a7834c91be28e4Affected ad3de274e065790181f112b9c72a2fb4665ee2fd to before 8e4b510fe91782522b7ca0ca881b663b5d35e513Affected c6c0a9f619584be19726ce7f81c31bc555af401a to before 7bc7b82fb2191b0d50a80ee4e27030918767dd1dAffected c75f5a55061091030a13fef71b9995b89bc86213 to before 18d26f9baca7d0d309303e3074a2252b8310884aAffected c75f5a55061091030a13fef71b9995b89bc86213 to before b346a531159d08c564a312a9eaeea691704f3c00Affected c75f5a55061091030a13fef71b9995b89bc86213 to before aba6ab57a910ad4b940c2024d15f2cdbf5b7f76bAffected 64c6b84c73f576380fadeec2d30aaeccbc2994c7Affected 4c86974fb42281b8041a504d92ab341ad4697325Affected 4.19.291 to before 4.19.299Affected 5.4.251 to before 5.4.261Affected 5.10.188 to before 5.10.201Affected 5.15.116 to before 5.15.139Affected 6.1.33 to before 6.1.63Affected 4.14.322 to before 4.15Affected 6.3.7 to before 6.4Affected
LinuxLinux	6.4Affected before 6.4Not affected 4.19.299 through 4.19.Not affected 5.4.261 through 5.4.Not affected 5.10.201 through 5.10.Not affected 5.15.139 through 5.15.Not affected 6.1.63 through 6.1.Not affected 6.5.12 through 6.5.Not affected 6.6.2 through 6.6.*Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

7f683f286a2196bd4d2da420a3194f5ba0269d8c to before 382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485Affected
815c95d82b79bb32e9aa7c95c6ac7cb1c92612cd to before 6c66d737b2726ac7784269ddf32a31634f8f269dAffected
2bf70b88cc358a437db376826f92c8dcf9c23587 to before a4dfebec32ec6d420a5506dd56a7834c91be28e4Affected
ad3de274e065790181f112b9c72a2fb4665ee2fd to before 8e4b510fe91782522b7ca0ca881b663b5d35e513Affected
c6c0a9f619584be19726ce7f81c31bc555af401a to before 7bc7b82fb2191b0d50a80ee4e27030918767dd1dAffected
c75f5a55061091030a13fef71b9995b89bc86213 to before 18d26f9baca7d0d309303e3074a2252b8310884aAffected
c75f5a55061091030a13fef71b9995b89bc86213 to before b346a531159d08c564a312a9eaeea691704f3c00Affected
c75f5a55061091030a13fef71b9995b89bc86213 to before aba6ab57a910ad4b940c2024d15f2cdbf5b7f76bAffected
64c6b84c73f576380fadeec2d30aaeccbc2994c7Affected
4c86974fb42281b8041a504d92ab341ad4697325Affected
4.19.291 to before 4.19.299Affected
5.4.251 to before 5.4.261Affected
5.10.188 to before 5.10.201Affected
5.15.116 to before 5.15.139Affected
6.1.33 to before 6.1.63Affected
4.14.322 to before 4.15Affected
6.3.7 to before 6.4Affected

LinuxLinux

6.4Affected
before 6.4Not affected
4.19.299 through 4.19.*Not affected
5.4.261 through 5.4.*Not affected
5.10.201 through 5.10.*Not affected
5.15.139 through 5.15.*Not affected
6.1.63 through 6.1.*Not affected
6.5.12 through 6.5.*Not affected
6.6.2 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.