CVE-2023-53687

tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk

State
Published
Severity
Not scored
Published
Oct 7, 2025
Updated
May 11, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk

When the best clk is searched, we iterate over all possible clk.

If we find a better match, the previous one, if any, needs to be freed. If a better match has already been found, we still need to free the new one, otherwise it leaks.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5f5a7a5578c5885201cf9c85856f023fe8b81765 to before 933e5b2998bc3a527d15efbf1e97c9e63297aa3cAffected
  • 5f5a7a5578c5885201cf9c85856f023fe8b81765 to before 01dd8a43a84616c830782166ba3cceb01ad95363Affected
  • 5f5a7a5578c5885201cf9c85856f023fe8b81765 to before 46574e5a0a2aee41e6ebb979cfe1dbaea8693e16Affected
  • 5f5a7a5578c5885201cf9c85856f023fe8b81765 to before 1962717c4649e026a4252fe6625175affd28a593Affected
  • 5f5a7a5578c5885201cf9c85856f023fe8b81765 to before 9dd8091959bc41fee51d0827276a2b982e84adf0Affected
  • 5f5a7a5578c5885201cf9c85856f023fe8b81765 to before f0bf102ef9b05d7294bd8d506755465f6867d944Affected
  • 5f5a7a5578c5885201cf9c85856f023fe8b81765 to before 1f426293fef1c13742b2a685bf7e363f51f6ee03Affected
  • 5f5a7a5578c5885201cf9c85856f023fe8b81765 to before 832e231cff476102e8204a9e7bddfe5c6154a375Affected
LinuxLinux
  • 3.3Affected
  • before 3.3Not affected
  • 4.14.322 through 4.14.*Not affected
  • 4.19.291 through 4.19.*Not affected
  • 5.4.251 through 5.4.*Not affected
  • 5.10.188 through 5.10.*Not affected
  • 5.15.121 through 5.15.*Not affected
  • 6.1.40 through 6.1.*Not affected
  • 6.4.5 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.