CVE-2023-53518

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() srcu_init_notifier_head() allocates resources that need to be released with a srcu_cleanup_notifier_head() call. Reported by kmemleak.

Rincian

Terbit di NVD

1 Oktober 2025

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/111bafa210ae546bee7644be730c42df9c35b66e patch
• https://git.kernel.org/stable/c/1640e9c72173911ad0fddb05012c01eafe082c4e patch
• https://git.kernel.org/stable/c/29811f4b8255d4238cf326f3bb7129784766beab patch
• https://git.kernel.org/stable/c/3354c401c68d70567d1ef25d12f4e22a7813a3c6 patch
• https://git.kernel.org/stable/c/5693d077595de721f9ddbf9d37f40e5409707dfe patch
• https://git.kernel.org/stable/c/64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d patch
• https://git.kernel.org/stable/c/7462483446cb9986568ad7adae746ce5f18d2968 patch
• https://git.kernel.org/stable/c/8918025feb2f5f7c73f2495c158f22997e25cb02 patch
• https://git.kernel.org/stable/c/ab192e5e5d3b48415909a8408acfd007a607bcc0 patch