–no cvss
CVE-2023-53745
um: vector: Fix memory leak in vector_config
Published 11 mo ago · modified 4 mo ago · JSON
CVSS
—
not scored
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 11%
Public exploits
0
none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
um: vector: Fix memory leak in vector_config
If the return value of the uml_parse_vector_ifspec function is NULL, we should call kfree(params) to prevent memory leak.
Exploit prediction (EPSS)
0.21% probability of exploitation in the next 30 days, higher than 11% of all scored CVEs.
Affected products
- Linux Linux
Classification
- Technology feeds
- Linux kernel (RSS, critical only)
References
- git.kernel.org /stable/c/5c49fb5ad01104acc584405572abf6616d45148e
- git.kernel.org /stable/c/6480c3a12755bf85d6738ab60967e89b809c701a
- git.kernel.org /stable/c/f2b9c4544e3bd60f353732291300097b0e8d8454
- git.kernel.org /stable/c/276a7298af6a801e9a865282605a79303365ec66
- git.kernel.org /stable/c/c8583b4655aab44a9796b5c4a681ddcc6fe2f0d0
- git.kernel.org /stable/c/634a9c139cc1362f6a9cc6cbfe442dbb60ff9f3f
- git.kernel.org /stable/c/8f88c73afe481f93d40801596927e8c0047b6d96
Sources
- CVE List: CVE-2023-53745
- NVD: CVE-2023-53745
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.