Description

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gss_import_v2_context The ctx->mech_used.data allocated by kmemdup is not freed in neither gss_import_v2_context nor it only caller gss_krb5_import_sec_context, which frees ctx on error. Thus, this patch reform the last call of gss_import_v2_context to the gss_krb5_import_ctx_v2, preventing the memleak while keepping the return formation.

INFO

Published Date :

2024-05-01T13:04:02.055Z

Last Modified :

2025-05-04T07:40:55.260Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2023-52653 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
  • Rhel Eus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-52653.

URL Resource
https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 cve-icon cve-icon
https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c cve-icon cve-icon
https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 cve-icon cve-icon
https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024050131-CVE-2023-52653-a5c2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52653 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52653 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact