CVE-2023-52653

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52653
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gss_import_v2_context The ctx->mech_used.data allocated by kmemdup is not freed in neither gss_import_v2_context nor it only caller gss_krb5_import_sec_context, which frees ctx on error. Thus, this patch reform the last call of gss_import_v2_context to the gss_krb5_import_ctx_v2, preventing the memleak while keepping the return formation.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 Patch
https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c Patch
https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 Patch
https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa Patch
https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 Patch
https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c Patch
https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 Patch
https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Apr 2025, 18:42

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 - () https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 - Patch
References () https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c - () https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c - Patch
References () https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 - () https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 - Patch
References () https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa - () https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
First Time Linux linux Kernel
Linux

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 - () https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 -
References () https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c - () https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c -
References () https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 - () https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 -
References () https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa - () https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa -

05 Nov 2024, 17:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: SUNRPC: corrige una fuga de memport en gss_import_v2_context El ctx->mech_used.data asignado por kmemdup no se libera ni en gss_import_v2_context ni solo en el llamador gss_krb5_import_sec_context, lo que libera a ctx en caso de error. Por lo tanto, este parche reforma la última llamada de gss_import_v2_context a gss_krb5_import_ctx_v2, evitando la fuga de memoria y manteniendo la formación de retorno.

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2025-04-08 18:42

NVD link : CVE-2023-52653

Mitre link : CVE-2023-52653

CVE.ORG link : CVE-2023-52653

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime