PT-2025-52974 · Linux · Linux Kernel
Published
2023-08-16
·
Updated
2026-03-24
·
CVE-2023-54017
CVSS v2.0
5.5
Medium
| Vector | AV:A/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak exists in the powerpc/pseries architecture within the
ibmebus bus init() function of the Linux kernel. If the device register() function returns an error during the initialization process, the name of the kobject allocated in the dev set name() function, which is called within device add(), is not freed. This occurs because put device() is not called to decrement the reference count set in device initialize() when device add() fails, preventing the kobject cleanup and subsequent memory release.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel