CVEvulnerability
CVE-2023-52684
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-17
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-401
Description
In the Linux kernel, the following vulnerability has been resolved:
firmware: qcom: qseecom: fix memory leaks in error paths
Fix instances of returning error codes directly instead of jumping to
the relevant labels where memory allocated for the SCM calls would be
freed.
Affected configurations
• linux linux kernel (>= 6.7 < 6.7.2)
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- https://git.kernel.org/stable/c/6c57d7b593c4a4e60db65d5ce0fe1d9f79ccbe9b Patch
- https://git.kernel.org/stable/c/85fdbf6840455be64eac16bdfe0df3368ee3d0f0 Patch
- https://git.kernel.org/stable/c/6c57d7b593c4a4e60db65d5ce0fe1d9f79ccbe9b Patch
- https://git.kernel.org/stable/c/85fdbf6840455be64eac16bdfe0df3368ee3d0f0 Patch