CVE-2023-52694
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function With tpd12s015_remove() marked with __exit this function is discarded when the driver is compiled as a built-in.
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function With tpd12s015_remove() marked with __exit this function is discarded when the driver is compiled as a built-in. The result is that when the driver unbinds there is no cleanup done which results in resource leakage or worse.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel · debian/debian linux
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/08ccff6ece35f08e8107e975903c370d849089e5Patch
- https://git.kernel.org/stable/c/53926e2a39629702f7f809d614b3ca89c2478205Patch
- https://git.kernel.org/stable/c/81f1bd85960b7a089a91e679ff7cd2524390bbf1Patch
- https://git.kernel.org/stable/c/a8657406e12aa10412134622c58977ac657f16d2Patch
- https://git.kernel.org/stable/c/ce3e112e7ae854249d8755906acc5f27e1542114Patch
- https://git.kernel.org/stable/c/e00ec5901954d85b39b5f10f94e60ab9af463eb1Patch
- https://git.kernel.org/stable/c/08ccff6ece35f08e8107e975903c370d849089e5Patch
- https://git.kernel.org/stable/c/53926e2a39629702f7f809d614b3ca89c2478205Patch
- https://git.kernel.org/stable/c/81f1bd85960b7a089a91e679ff7cd2524390bbf1Patch
- https://git.kernel.org/stable/c/a8657406e12aa10412134622c58977ac657f16d2Patch
- https://git.kernel.org/stable/c/ce3e112e7ae854249d8755906acc5f27e1542114Patch
- https://git.kernel.org/stable/c/e00ec5901954d85b39b5f10f94e60ab9af463eb1Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.htmlMailing List, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.