What’s Vulnerable › Vulnerabilities

CVE-2023-52706: gpio: sim: fix a memory leak

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpio_sim_remove_hogs() that leads to GPIO hog structures never being freed.

Affected products

• Linux kernel: from 5.17 before 6.1.13; 6.2-rc1, 6.2-rc2, 6.2-rc3, 6.2-rc4, 6.2-rc5, 6.2-rc6 (+2) — fixed in 6.1.13

How to fix

Upgrade to a fixed version: Linux kernel 6.1.13. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/79eeab1d85e0fee4c0bc36f3b6ddf3920f39f74b
• https://git.kernel.org/stable/c/854e1ecff266033d3149666d3c5b8b0e174b4210
• https://git.kernel.org/stable/c/79eeab1d85e0fee4c0bc36f3b6ddf3920f39f74b
• https://git.kernel.org/stable/c/854e1ecff266033d3149666d3c5b8b0e174b4210

Get alerted when CVE-2023-52706 or the next vulnerability affects your stack