CVE-2023-53435

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cassini: Fix a memory leak in the error handling path of cas_init_one()

cas_saturn_firmware_init() allocates some memory using vmalloc(). This memory is freed in the .remove() function but not it the error handling path of the probe.

Add the missing vfree() to avoid a memory leak, should an error occur.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16, < 11c0ed097a874156957b515d0ba7e356142eab87; >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16, < 60d8e8b88087d68e10c8991a0f6733fa2f963ff0; >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16, < e20105d967ab5b53ff50a0e5991fe37324d2ba20; >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16, < dc61f7582cc92d547d02e141cd66f5d1f4ed8012; >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16, < 234e744d86bd95b381d24546df2dba72804e0219; >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16, < 172146c26f0c1b86ab4e9ebffc7e06f04229fa17; >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16, < b8b1a667744741fa7807b09a12797a27f14f3fac; >= fcaa40669cd798ca2ac0d15441e8a1d1145f2b16, < 412cd77a2c24b191c65ea53025222418db09817c
LinuxLinux2.6.28

References

Timeline

Published
Sep 18, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-534365.5In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible memory leak if device_add() fails If device_aCVE-2023-534375.5In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descriptors If the sourceCVE-2023-534385.5In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The InstrCVE-2023-534395.5In the Linux kernel, the following vulnerability has been resolved: net: skb_partial_csum_set() fix against transport header magic value sCVE-2023-53447.5Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.CVE-2023-534405.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current nilfs2 sysfs support CVE-2023-534415.5In the Linux kernel, the following vulnerability has been resolved: bpf: cpumap: Fix memory leak in cpu_map_update_elem Syzkaller reportedCVE-2023-534425.5In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vice versa ADQ and swCVE-2023-534435.5In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak ICVE-2023-534445.5In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix bulk_move corruption when adding a entry When the resourcCVE-2023-534455.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix a refcount bug in qrtr_recvmsg() Syzbot reported a bug CVE-2023-534467.8In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free