CVE-2023-53422
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fw_info file all the way, since we return NULL indicating no more data, but don't free the…
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fw_info file all the way, since we return NULL indicating no more data, but don't free the status tracking object.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.16% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/37f64bc8e001f216566d17ef9fd5608c762ebcd4Patch
- https://git.kernel.org/stable/c/3d90d2f4a018fe8cfd65068bc6350b6222be4852Patch
- https://git.kernel.org/stable/c/89496d6cff297c88fe0286a440c380ceb172da2bPatch
- https://git.kernel.org/stable/c/b830ba20b43be52eae7d4087b61a0079dec56820Patch
- https://git.kernel.org/stable/c/e302e9ca14a86a80eadfb24a34d8675aadaf3ef3Patch
- https://git.kernel.org/stable/c/fe17124282da055cb2e53f0131521459b5c7866cPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.