VulnerabilityAnalyzed
CVE-2023-53449
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential memleak in dasd_eckd_init() `dasd_reserve_req` is allocated before `dasd_vol_info_req`, and it also needs to be freed before the error returns, just like the…
MEDIUM 5.5EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential memleak in dasd_eckd_init() `dasd_reserve_req` is allocated before `dasd_vol_info_req`, and it also needs to be freed before the error returns, just like the other cases in this function.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.16% probability · 5th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-401
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/460e9bed82e49db1b823dcb4e421783854d86c40Patch
- https://git.kernel.org/stable/c/544a552be0869231799784279d52704c4d314d33Patch
- https://git.kernel.org/stable/c/a50e28d433acf22258f9f34831057387f04ef074Patch
- https://git.kernel.org/stable/c/aede5230d154b6b237985ec9df7ebbd1dce96810Patch
- https://git.kernel.org/stable/c/ee986d80acdef710a886be404308188ea11000c8Patch
- https://git.kernel.org/stable/c/ef3a7ffc0a6f833578bc8d1dcb79d0633c7e4ec3Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.