PT-2024-14692 · Linux · Linux Kernel

Dan Carpenter · Published 2023-12-18 · Updated 2024-11-06 · CVE-2023-52684

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to memory leaks in error paths in the Linux kernel, specifically in the qseecom firmware component. The problem occurs when error codes are returned directly instead of jumping to the relevant labels where memory allocated for the SCM calls would be freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-15083

CVE-2023-52684

Affected Products

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52684.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-52684 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-52684 · Vendor Advisory
• https://git.kernel.org/stable/c/6c57d7b593c4a4e60db65d5ce0fe1d9f79ccbe9b · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-52684 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52684 · Vendor Advisory
• https://git.kernel.org/stable/c/85fdbf6840455be64eac16bdfe0df3368ee3d0f0 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52684 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52684 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52684 · Security Note
• https://osv.dev/vulnerability/CVE-2023-52684 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15083 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2281316 · Note
• https://git.kernel.org/linus/6c57d7b593c4a4e60db65d5ce0fe1d9f79ccbe9b · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note