CVE-2023-53379

usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 23, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()

Smatch reports: drivers/usb/phy/phy-tahvo.c: tahvo_usb_probe() warn: missing unwind goto?

After geting irq, if ret < 0, it will return without error handling to free memory. Just add error handling to fix this problem.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	3f06415418f37ac602e71a61ee83ea43553e6bbd to before 3e5a7bebf832b1482efe27bcc15a88c5b28a30d0Affected 5e2d2f05204f7ab9c645a1fb9f10a3f6393dd2fa to before 4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3Affected 606668e24a0d7fd262e2326d76bb60b965fe713f to before fe9cdc19861950582f077f254a12026e169eaee5Affected 494629ba62a961de1f2dd0b7125878acb27b8043 to before 56901de563359de20513e16a9ae008ae2c22e9a9Affected 0d45a1373e669880b8beaecc8765f44cb0241e47 to before ecf26d6e1b5450620c214feea537bb6ce05c6741Affected 0d45a1373e669880b8beaecc8765f44cb0241e47 to before dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aacAffected 0d45a1373e669880b8beaecc8765f44cb0241e47 to before 38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23faAffected 0d45a1373e669880b8beaecc8765f44cb0241e47 to before 342161c11403ea00e9febc16baab1d883d589d04Affected 62e663c172115b9e26a0856508db6277871a7c32Affected 4eab21911d5d6a3377b8965b9fb06463b248fe6bAffected dcf379ea4e93b8ea23d628db68ae953b26d63af1Affected b45f0d0105a0f50e681dc8fac4b32e1192de34f2Affected 4.14.247 to before 4.14.322Affected 4.19.207 to before 4.19.291Affected 5.4.146 to before 5.4.251Affected 5.10.65 to before 5.10.188Affected 4.4.284 to before 4.5Affected 4.9.283 to before 4.10Affected 5.13.17 to before 5.14Affected 5.14.4 to before 5.15Affected
LinuxLinux	5.15Affected before 5.15Not affected 4.14.322 through 4.14.Not affected 4.19.291 through 4.19.Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.4.4 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

3f06415418f37ac602e71a61ee83ea43553e6bbd to before 3e5a7bebf832b1482efe27bcc15a88c5b28a30d0Affected
5e2d2f05204f7ab9c645a1fb9f10a3f6393dd2fa to before 4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3Affected
606668e24a0d7fd262e2326d76bb60b965fe713f to before fe9cdc19861950582f077f254a12026e169eaee5Affected
494629ba62a961de1f2dd0b7125878acb27b8043 to before 56901de563359de20513e16a9ae008ae2c22e9a9Affected
0d45a1373e669880b8beaecc8765f44cb0241e47 to before ecf26d6e1b5450620c214feea537bb6ce05c6741Affected
0d45a1373e669880b8beaecc8765f44cb0241e47 to before dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aacAffected
0d45a1373e669880b8beaecc8765f44cb0241e47 to before 38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23faAffected
0d45a1373e669880b8beaecc8765f44cb0241e47 to before 342161c11403ea00e9febc16baab1d883d589d04Affected
62e663c172115b9e26a0856508db6277871a7c32Affected
4eab21911d5d6a3377b8965b9fb06463b248fe6bAffected
dcf379ea4e93b8ea23d628db68ae953b26d63af1Affected
b45f0d0105a0f50e681dc8fac4b32e1192de34f2Affected
4.14.247 to before 4.14.322Affected
4.19.207 to before 4.19.291Affected
5.4.146 to before 5.4.251Affected
5.10.65 to before 5.10.188Affected
4.4.284 to before 4.5Affected
4.9.283 to before 4.10Affected
5.13.17 to before 5.14Affected
5.14.4 to before 5.15Affected

LinuxLinux

5.15Affected
before 5.15Not affected
4.14.322 through 4.14.*Not affected
4.19.291 through 4.19.*Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.