CVE-2023-52661: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()
In the Linux kernel, the following vulnerability has been resolved:
drm/tegra: rgb: Fix missing clkput() in the error handling paths of tegradcrgbprobe()
If clkgetsys(..., "plld2out0") fails, the clkgetsys() call must be undone.
Add the missing clkput and a new 'putplldout0' label in the error handling path, and use it.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
drm/tegra: rgb: Fix missing clkput() in the error handling paths of tegradcrgbprobe()
The Linux kernel CVE team has assigned CVE-2023-52661 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2023-52661-5539@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52661?
CVE-2023-52661 has a medium severity rating due to its potential impact on the integrity of the Linux kernel's error handling paths.
How do I fix CVE-2023-52661?
To fix CVE-2023-52661, update the Linux kernel to versions 5.10.223-1, 6.1.83, or any later versions as specified in the patched releases.
Which Linux distributions are affected by CVE-2023-52661?
CVE-2023-52661 affects Red Hat and Debian-based distributions running specific versions of the Linux kernel.
What components are impacted by CVE-2023-52661?
CVE-2023-52661 impacts the Tegra DC RGB driver within the Linux kernel.
Is CVE-2023-52661 remotely exploitable?
CVE-2023-52661 is not known to be remotely exploitable; the vulnerability primarily affects local error handling.