What’s Vulnerable › Vulnerabilities

CVE-2023-52643: iio: core: fix memleak in iio_device_register_sysfs

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-17 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix memleak in iio_device_register_sysfs When iio_device_register_sysfs_group() fails, we should free iio_dev_opaque->chan_attr_group.attrs to prevent potential memleak.

Affected products

• Linux kernel: from 5.13 before 5.15.149; from 5.16 before 6.1.79; from 6.2 before 6.6.18; from 6.7 before 6.7.6; 6.8-rc1, 6.8-rc2, 6.8-rc3, 6.8-rc4 — fixed in 5.15.149, 6.1.79, 6.6.18, 6.7.6

How to fix

Upgrade to a fixed version: Linux kernel 5.15.149, 6.1.79, 6.6.18, 6.7.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1c6d19c8cbf6abcea2c8fca2db26abca2cbf0363
• https://git.kernel.org/stable/c/359f220d0e753bba840eac19ffedcdc816b532f2
• https://git.kernel.org/stable/c/3db312e06851996e7fb27cb5a8ccab4c0f9cdb93
• https://git.kernel.org/stable/c/95a0d596bbd0552a78e13ced43f2be1038883c81
• https://git.kernel.org/stable/c/b90126c86d83912688501826643ea698f0df1728
• https://git.kernel.org/stable/c/1c6d19c8cbf6abcea2c8fca2db26abca2cbf0363
• https://git.kernel.org/stable/c/359f220d0e753bba840eac19ffedcdc816b532f2
• https://git.kernel.org/stable/c/3db312e06851996e7fb27cb5a8ccab4c0f9cdb93
• https://git.kernel.org/stable/c/95a0d596bbd0552a78e13ced43f2be1038883c81
• https://git.kernel.org/stable/c/b90126c86d83912688501826643ea698f0df1728

Get alerted when CVE-2023-52643 or the next vulnerability affects your stack