PT-2024-8217 · Linux+6 · Linux Kernel+6
Published
2024-02-16
·
Updated
2026-03-14
·
CVE-2023-52652
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a possible name leak in the
ntb register device() function. If device register() fails in ntb register device(), the device name allocated by dev set name() should be freed. To fix this, put device() is called in the error path so that the name can be freed in kobject cleanup(). As a result, put device() in the error path of ntb register device() is removed and the actual error is returned.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu