CVE - CVE-2023-52652

CVE-ID
CVE-2023-52652	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: NTB: fix possible name leak in ntb_register_device() If device_register() fails in ntb_register_device(), the device name allocated by dev_set_name() should be freed. As per the comment in device_register(), callers should use put_device() to give up the reference in the error path. So fix this by calling put_device() in the error path so that the name can be freed in kobject_cleanup(). As a result of this, put_device() in the error path of ntb_register_device() is removed and the actual error is returned. [mani: reworded commit message]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/6632a54ac8057cc0b0d789c6f73883e871bcd25c URL:https://git.kernel.org/stable/c/6632a54ac8057cc0b0d789c6f73883e871bcd25c MISC:https://git.kernel.org/stable/c/913421f9f7fd8324dcc41753d0f28b52e177ef04 URL:https://git.kernel.org/stable/c/913421f9f7fd8324dcc41753d0f28b52e177ef04 MISC:https://git.kernel.org/stable/c/a039690d323221eb5865f1f31db3ec264e7a14b6 URL:https://git.kernel.org/stable/c/a039690d323221eb5865f1f31db3ec264e7a14b6 MISC:https://git.kernel.org/stable/c/a62b9f3d7bbfac874cc0c638bc1776dcf1f8ec06 URL:https://git.kernel.org/stable/c/a62b9f3d7bbfac874cc0c638bc1776dcf1f8ec06 MISC:https://git.kernel.org/stable/c/aebfdfe39b9327a3077d0df8db3beb3160c9bdd0 URL:https://git.kernel.org/stable/c/aebfdfe39b9327a3077d0df8db3beb3160c9bdd0 MISC:https://git.kernel.org/stable/c/e8025439ef8e16029dc313d78a351ef192469b7b URL:https://git.kernel.org/stable/c/e8025439ef8e16029dc313d78a351ef192469b7b
Assigning CNA
kernel.org
Date Record Created
20240306	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240306)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)