CVE-2023-53069
In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for alloc_percpu Add the free_percpu for the allocated "vf->hw.lmt_info" in order to avoid memory leak, same as the "pf->hw.lmt_info" in…
Does this matter?
Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for alloc_percpu Add the free_percpu for the allocated "vf->hw.lmt_info" in order to avoid memory leak, same as the "pf->hw.lmt_info" in `drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.19% probability · 9th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/813b590840771890c738ce6dbfd0c5938a1bafb9Patch
- https://git.kernel.org/stable/c/840631bcf21f58c0a3f01378a54d79e9ce86b226Patch
- https://git.kernel.org/stable/c/90874b76e5f82eaa3309714d72ff2cd8bb8d1b02Patch
- https://git.kernel.org/stable/c/f038f3917baf04835ba2b7bcf2a04ac93fbf8a9cPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.