github - ghsa-gg3p-v52w-p6fr

ghsa-gg3p-v52w-p6fr

Vulnerability from github

Published

2024-03-03 00:30

Modified

2024-12-11 15:31

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

drm/meson: fix memory leak on ->hpd_notify callback

The EDID returned by drm_bridge_get_edid() needs to be freed.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-52563"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-401"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-02T22:15:48Z",
    "severity": "MODERATE"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/meson: fix memory leak on -\u003ehpd_notify callback\n\nThe EDID returned by drm_bridge_get_edid() needs to be freed.",
  "id": "GHSA-gg3p-v52w-p6fr",
  "modified": "2024-12-11T15:31:14Z",
  "published": "2024-03-03T00:30:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52563"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/099f0af9d98231bb74956ce92508e87cbcb896be"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/43b63e088887a8b82750e16762f77100ffa76cba"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/66cb6d74f5a1b6eafe3370b56bf2cb575a91acbc"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ee335e0094add7fc2c7034e0534e1920d61d2078"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2023-52563 (GCVE-0-2023-52563)

Vulnerability from cvelistv5

Published

2024-03-02 21:59

Modified

2025-05-04 07:38

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix memory leak on ->hpd_notify callback The EDID returned by drm_bridge_get_edid() needs to be freed.

References

URL

Tags

	https://git.kernel.org/stable/c/66cb6d74f5a1b6eafe3370b56bf2cb575a91acbc
	https://git.kernel.org/stable/c/ee335e0094add7fc2c7034e0534e1920d61d2078
	https://git.kernel.org/stable/c/43b63e088887a8b82750e16762f77100ffa76cba
	https://git.kernel.org/stable/c/099f0af9d98231bb74956ce92508e87cbcb896be

Impacted products

Vendor

Product

Version

Version: e098989a9219f4456047f9b0e8c44f03e29a843e
Version: 0af5e0b41110e2da872030395231ab19c45be931
Version: 0af5e0b41110e2da872030395231ab19c45be931
Version: 0af5e0b41110e2da872030395231ab19c45be931

Version: 5.17

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:03:20.849Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/66cb6d74f5a1b6eafe3370b56bf2cb575a91acbc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ee335e0094add7fc2c7034e0534e1920d61d2078"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/43b63e088887a8b82750e16762f77100ffa76cba"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/099f0af9d98231bb74956ce92508e87cbcb896be"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52563",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:56:32.678323Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:37.258Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/meson/meson_encoder_hdmi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "66cb6d74f5a1b6eafe3370b56bf2cb575a91acbc",
              "status": "affected",
              "version": "e098989a9219f4456047f9b0e8c44f03e29a843e",
              "versionType": "git"
            },
            {
              "lessThan": "ee335e0094add7fc2c7034e0534e1920d61d2078",
              "status": "affected",
              "version": "0af5e0b41110e2da872030395231ab19c45be931",
              "versionType": "git"
            },
            {
              "lessThan": "43b63e088887a8b82750e16762f77100ffa76cba",
              "status": "affected",
              "version": "0af5e0b41110e2da872030395231ab19c45be931",
              "versionType": "git"
            },
            {
              "lessThan": "099f0af9d98231bb74956ce92508e87cbcb896be",
              "status": "affected",
              "version": "0af5e0b41110e2da872030395231ab19c45be931",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/meson/meson_encoder_hdmi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.17"
            },
            {
              "lessThan": "5.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.134",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.56",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.134",
                  "versionStartIncluding": "5.15.61",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.56",
                  "versionStartIncluding": "5.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.6",
                  "versionStartIncluding": "5.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "5.17",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/meson: fix memory leak on -\u003ehpd_notify callback\n\nThe EDID returned by drm_bridge_get_edid() needs to be freed."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T07:38:50.545Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/66cb6d74f5a1b6eafe3370b56bf2cb575a91acbc"
        },
        {
          "url": "https://git.kernel.org/stable/c/ee335e0094add7fc2c7034e0534e1920d61d2078"
        },
        {
          "url": "https://git.kernel.org/stable/c/43b63e088887a8b82750e16762f77100ffa76cba"
        },
        {
          "url": "https://git.kernel.org/stable/c/099f0af9d98231bb74956ce92508e87cbcb896be"
        }
      ],
      "title": "drm/meson: fix memory leak on -\u003ehpd_notify callback",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52563",
    "datePublished": "2024-03-02T21:59:36.220Z",
    "dateReserved": "2024-03-02T21:55:42.567Z",
    "dateUpdated": "2025-05-04T07:38:50.545Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.