CVE-2023-52694: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: tpd12s015: Drop buggy exit annotation for remove function
With tpd12s015remove() marked with exit this function is discarded when the driver is compiled as a built-in. The result is that when the driver unbinds there is no cleanup done which results in resource leakage or worse.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.128-1Fixed in 6.12.21-1Fixed in 6.12.22-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52694?
CVE-2023-52694 is considered a moderate severity vulnerability due to its potential impact on the functionality of the Linux kernel driver.
How do I fix CVE-2023-52694?
To mitigate CVE-2023-52694, ensure that you update your Linux kernel to a patched version such as 5.10.226-1, 6.1.123-1, or later.
Which versions of the Linux kernel are affected by CVE-2023-52694?
CVE-2023-52694 affects specific versions of the Linux kernel including 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, and 6.12.12-1.
What is the nature of the vulnerability in CVE-2023-52694?
CVE-2023-52694 involves an unusual behavior in the Linux kernel related to the tpd12s015 driver and its remove function due to incorrect function annotation.
Is CVE-2023-52694 present in built-in kernel drivers?
Yes, CVE-2023-52694 can affect built-in kernel drivers because the buggy __exit annotation can cause the remove function to be discarded.