CVE-2023-52571

HIGH

Linux Kernel < 6.1.56 - Memory Leak

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: rk817: Fix node refcount leak Dan Carpenter reports that the Smatch static checker warning has found that there is another refcount leak in the probe function. While of_node_put() was added in one of the return paths, it should in fact be added for ALL return paths that return an error and at driver removal time.

Scores

CVSS v3 7.1
EPSS 0.0002
EPSS Percentile 4.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Classification

CWE
CWE-401
Status published

Affected Products (4)

linux/linux_kernel < 6.1.56
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel

Timeline

Published Mar 02, 2024
Tracked Since Feb 18, 2026