CVE-2023-52929

nvmem: core: fix cleanup after dev_set_name()

State
Published
Severity
Not scored
Published
Mar 27, 2025
Updated
May 11, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvmem: core: fix cleanup after dev_set_name()

If dev_set_name() fails, we leak nvmem->wp_gpio as the cleanup does not put this. While a minimal fix for this would be to add the gpiod_put() call, we can do better if we split device_register(), and use the tested nvmem_release() cleanup code by initialising the device early, and putting the device.

This results in a slightly larger fix, but results in clear code.

Note: this patch depends on "nvmem: core: initialise nvmem->id early" and "nvmem: core: remove nvmem_config wp_gpio".

[Srini: Fixed subject line and error code handing with wp_gpio while applying.]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a19a0f67dbb89ad2bfc466f2003841acba645884 to before 23676ecd2eb377f7c24a6ff578b0f4c7135658b6Affected
  • 14eea6449473c1f55e196cc104ba16d144465869 to before 8f9c4b2a3b132bf6698e477aba6ee194b40c75f4Affected
  • 5544e90c81261e82e02bbf7c6015a4b9c8c825ef to before 39708bc8da7858de0bed9b3a88b3beb1d1e0b443Affected
  • 5544e90c81261e82e02bbf7c6015a4b9c8c825ef to before 560181d3ace61825f4ca9dd3481d6c0ee6709fa8Affected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.11 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.