CVE-2023-52643: iio: core: fix memleak in iio_device_register_sysfs
In the Linux kernel, the following vulnerability has been resolved:
iio: core: fix memleak in iiodeviceregistersysfs
The Linux kernel CVE team has assigned CVE-2023-52643 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041701-CVE-2023-52643-8834@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
iio: core: fix memleak in iiodeviceregistersysfs
When iiodeviceregistersysfsgroup() fails, we should free iiodevopaque->chanattrgroup.attrs to prevent potential memleak.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52643?
CVE-2023-52643 has been categorized with a low severity level due to its nature of fixing a memory leak in the Linux kernel.
How do I fix CVE-2023-52643?
To address CVE-2023-52643, users should upgrade their Linux kernel to versions 5.15.149, 6.1.79, or later versions as specified in the advisory.
Which Linux kernel versions are affected by CVE-2023-52643?
CVE-2023-52643 affects Linux kernel versions prior to 5.15.149, 6.1.79, 6.6.18, 6.7.6, and 6.8.
Is CVE-2023-52643 a critical vulnerability?
No, CVE-2023-52643 is not classified as a critical vulnerability, but it is advisable to apply the fix to maintain system integrity.
What systems are impacted by CVE-2023-52643?
CVE-2023-52643 impacts any systems running vulnerable versions of the Linux kernel across various distributions.