What’s Vulnerable › Vulnerabilities

CVE-2023-52838: fbdev: imsttfb: fix a resource leak in probe

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-06-17
• Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

Affected products

• Linux kernel: from 4.14.322 before 4.15; from 4.19.291 before 4.19.299; from 5.4.251 before 5.4.261; from 5.10.188 before 5.10.201; from 5.15.116 before 5.15.139; from 6.1.33 before 6.1.63 — fixed in 4.15, 4.19.299, 5.10.201, 5.15.139, 5.4.261, 6.1.63

How to fix

Upgrade to a fixed version: Linux kernel 4.15, 4.19.299, 5.10.201, 5.15.139. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/18d26f9baca7d0d309303e3074a2252b8310884a
• https://git.kernel.org/stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485
• https://git.kernel.org/stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d
• https://git.kernel.org/stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d
• https://git.kernel.org/stable/c/8e4b510fe91782522b7ca0ca881b663b5d35e513
• https://git.kernel.org/stable/c/a4dfebec32ec6d420a5506dd56a7834c91be28e4
• https://git.kernel.org/stable/c/aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b
• https://git.kernel.org/stable/c/b346a531159d08c564a312a9eaeea691704f3c00
• https://git.kernel.org/stable/c/18d26f9baca7d0d309303e3074a2252b8310884a
• https://git.kernel.org/stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485
• https://git.kernel.org/stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d
• https://git.kernel.org/stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d

Get alerted when CVE-2023-52838 or the next vulnerability affects your stack