What’s Vulnerable › Vulnerabilities

CVE-2023-53379: usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() Smatch reports: drivers/usb/phy/phy-tahvo.c: tahvo_usb_probe() warn: missing unwind goto? After geting irq, if ret < 0, it will return without error handling to free memory. Just add error handling to fix this problem.

Affected products

• Linux kernel: from 4.4.284 before 4.5; from 4.9.283 before 4.10; from 4.14.247 before 4.14.322; from 4.19.207 before 4.19.291; from 5.4.146 before 5.4.251; from 5.10.65 before 5.10.188 — fixed in 4.10, 4.14.322, 4.19.291, 4.5, 5.10.188, 5.14

How to fix

Upgrade to a fixed version: Linux kernel 4.10, 4.14.322, 4.19.291, 4.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/342161c11403ea00e9febc16baab1d883d589d04
• https://git.kernel.org/stable/c/38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23fa
• https://git.kernel.org/stable/c/3e5a7bebf832b1482efe27bcc15a88c5b28a30d0
• https://git.kernel.org/stable/c/4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3
• https://git.kernel.org/stable/c/56901de563359de20513e16a9ae008ae2c22e9a9
• https://git.kernel.org/stable/c/dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aac
• https://git.kernel.org/stable/c/ecf26d6e1b5450620c214feea537bb6ce05c6741
• https://git.kernel.org/stable/c/fe9cdc19861950582f077f254a12026e169eaee5

Get alerted when CVE-2023-53379 or the next vulnerability affects your stack