CVE-2023-52652

NTB: fix possible name leak in ntb_register_device()

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NTB: fix possible name leak in ntb_register_device()

If device_register() fails in ntb_register_device(), the device name

allocated by dev_set_name() should be freed. As per the comment in

device_register(), callers should use put_device() to give up the

reference in the error path. So fix this by calling put_device() in the

error path so that the name can be freed in kobject_cleanup().

As a result of this, put_device() in the error path of

ntb_register_device() is removed and the actual error is returned.

[mani: reworded commit message]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Published
2024-05-01T13:03Z
EPSS history
Timeline
  • 01 MAY 13:03Z
    NTB: fix possible name leak in ntb_register_device()
    cvelistv5