CVE-2023-53255

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53255
In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() svc_create_memory_pool() is only called from stratix10_svc_drv_probe(). Most of resources in the probe are managed, but not this memremap() call. There is also no memunmap() call in the file. So switch to devm_memremap() to avoid a resource leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1995f15590ca222f91193ed11461862b450abfd6 Patch
https://git.kernel.org/stable/c/7363de081c793e47866cb54ce7cb8a480cffc259 Patch
https://git.kernel.org/stable/c/974ac045a05ad12a0b4578fb303f00dcc22f3aba Patch
https://git.kernel.org/stable/c/c04ed61ebf01968d7699b121663982493ed577fb Patch
https://git.kernel.org/stable/c/cb8a31a56df8492fb0d900959238e1a3ff8b8981 Patch
https://git.kernel.org/stable/c/e3373e6b6c79aff698442b00d20c9f285d296e46 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Dec 2025, 17:10

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1995f15590ca222f91193ed11461862b450abfd6 - () https://git.kernel.org/stable/c/1995f15590ca222f91193ed11461862b450abfd6 - Patch
References () https://git.kernel.org/stable/c/7363de081c793e47866cb54ce7cb8a480cffc259 - () https://git.kernel.org/stable/c/7363de081c793e47866cb54ce7cb8a480cffc259 - Patch
References () https://git.kernel.org/stable/c/974ac045a05ad12a0b4578fb303f00dcc22f3aba - () https://git.kernel.org/stable/c/974ac045a05ad12a0b4578fb303f00dcc22f3aba - Patch
References () https://git.kernel.org/stable/c/c04ed61ebf01968d7699b121663982493ed577fb - () https://git.kernel.org/stable/c/c04ed61ebf01968d7699b121663982493ed577fb - Patch
References () https://git.kernel.org/stable/c/cb8a31a56df8492fb0d900959238e1a3ff8b8981 - () https://git.kernel.org/stable/c/cb8a31a56df8492fb0d900959238e1a3ff8b8981 - Patch
References () https://git.kernel.org/stable/c/e3373e6b6c79aff698442b00d20c9f285d296e46 - () https://git.kernel.org/stable/c/e3373e6b6c79aff698442b00d20c9f285d296e46 - Patch
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Information

Published : 2025-09-15 15:15

Updated : 2025-12-03 17:10

NVD link : CVE-2023-53255

Mitre link : CVE-2023-53255

CVE.ORG link : CVE-2023-53255

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime