CVE-2023-53379

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53379
In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() Smatch reports: drivers/usb/phy/phy-tahvo.c: tahvo_usb_probe() warn: missing unwind goto? After geting irq, if ret < 0, it will return without error handling to free memory. Just add error handling to fix this problem.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/342161c11403ea00e9febc16baab1d883d589d04 Patch
https://git.kernel.org/stable/c/38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23fa Patch
https://git.kernel.org/stable/c/3e5a7bebf832b1482efe27bcc15a88c5b28a30d0 Patch
https://git.kernel.org/stable/c/4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3 Patch
https://git.kernel.org/stable/c/56901de563359de20513e16a9ae008ae2c22e9a9 Patch
https://git.kernel.org/stable/c/dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aac Patch
https://git.kernel.org/stable/c/ecf26d6e1b5450620c214feea537bb6ce05c6741 Patch
https://git.kernel.org/stable/c/fe9cdc19861950582f077f254a12026e169eaee5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

12 Dec 2025, 18:08

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/342161c11403ea00e9febc16baab1d883d589d04 - () https://git.kernel.org/stable/c/342161c11403ea00e9febc16baab1d883d589d04 - Patch
References () https://git.kernel.org/stable/c/38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23fa - () https://git.kernel.org/stable/c/38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23fa - Patch
References () https://git.kernel.org/stable/c/3e5a7bebf832b1482efe27bcc15a88c5b28a30d0 - () https://git.kernel.org/stable/c/3e5a7bebf832b1482efe27bcc15a88c5b28a30d0 - Patch
References () https://git.kernel.org/stable/c/4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3 - () https://git.kernel.org/stable/c/4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3 - Patch
References () https://git.kernel.org/stable/c/56901de563359de20513e16a9ae008ae2c22e9a9 - () https://git.kernel.org/stable/c/56901de563359de20513e16a9ae008ae2c22e9a9 - Patch
References () https://git.kernel.org/stable/c/dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aac - () https://git.kernel.org/stable/c/dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aac - Patch
References () https://git.kernel.org/stable/c/ecf26d6e1b5450620c214feea537bb6ce05c6741 - () https://git.kernel.org/stable/c/ecf26d6e1b5450620c214feea537bb6ce05c6741 - Patch
References () https://git.kernel.org/stable/c/fe9cdc19861950582f077f254a12026e169eaee5 - () https://git.kernel.org/stable/c/fe9cdc19861950582f077f254a12026e169eaee5 - Patch
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Sep 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-18 14:15

Updated : 2026-01-14 19:16

NVD link : CVE-2023-53379

Mitre link : CVE-2023-53379

CVE.ORG link : CVE-2023-53379

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime