Bug 2282761 (CVE-2023-52838) - CVE-2023-52838 kernel: fbdev: imsttfb: fix a resource leak in probe
Summary: CVE-2023-52838 kernel: fbdev: imsttfb: fix a resource leak in probe
Keywords:
Status: NEW
Alias: CVE-2023-52838
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 2282863
TreeView+ depends on / blocked
 
Reported: 2024-05-22 21:06 UTC by Mauro Matteo Cascella
Modified: 2024-06-20 12:35 UTC (History)
50 users (show)

Fixed In Version: kernel 4.19.299, kernel 5.4.261, kernel 5.10.201, kernel 5.15.139, kernel 6.1.63, kernel 6.5.12, kernel 6.6.2, kernel 6.7
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description Mauro Matteo Cascella 2024-05-22 21:06:27 UTC
In the Linux kernel, the following vulnerability has been resolved:

fbdev: imsttfb: fix a resource leak in probe

The Linux kernel CVE team has assigned CVE-2023-52838 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024052110-CVE-2023-52838-be44@gregkh/T

Comment 2 Alex 2024-06-09 14:09:33 UTC
The result of automatic check (that is developed by Alexander Larkin) for this CVE-2023-52838 is: 	SKIP	No affected files built, so skip this CVE	NO			-	-	unknown	 (where first YES/NO value means if related sources built).

Comment 5 Niels De Graef 2024-06-20 08:20:26 UTC
Closed the RHEL trackers as not a bug, the kconfig for that code isn't set:

{noformat}
$ grep -niR CONFIG_FB_IMSTT redhat
redhat/configs/generic/CONFIG_FB_IMSTT:1:# CONFIG_FB_IMSTT is not set
{noformat}


Note You need to log in before you can comment on or make changes to this bug.