Back
CVE-2023-53379
usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
Medium5.5EPSS 0.15%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() Smatch reports: drivers/usb/phy/phy-tahvo.c: tahvo_usb_probe() warn: missing unwind goto? After geting irq, if ret < 0, it will return without error handling to free memory. Just add error handling to fix this problem.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.15% · top 96% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 3f06415418f37ac602e71a61ee83ea43553e6bbd – < 3e5a7bebf832b1482efe27bcc15a88c5b28a30d0
- affected 5e2d2f05204f7ab9c645a1fb9f10a3f6393dd2fa – < 4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3
- affected 606668e24a0d7fd262e2326d76bb60b965fe713f – < fe9cdc19861950582f077f254a12026e169eaee5
- affected 494629ba62a961de1f2dd0b7125878acb27b8043 – < 56901de563359de20513e16a9ae008ae2c22e9a9
- affected 0d45a1373e669880b8beaecc8765f44cb0241e47 – < ecf26d6e1b5450620c214feea537bb6ce05c6741
- affected 0d45a1373e669880b8beaecc8765f44cb0241e47 – < dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aac
- affected 0d45a1373e669880b8beaecc8765f44cb0241e47 – < 38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23fa
- affected 0d45a1373e669880b8beaecc8765f44cb0241e47 – < 342161c11403ea00e9febc16baab1d883d589d04
- affected 62e663c172115b9e26a0856508db6277871a7c32
- affected 4eab21911d5d6a3377b8965b9fb06463b248fe6b
- affected dcf379ea4e93b8ea23d628db68ae953b26d63af1
- affected b45f0d0105a0f50e681dc8fac4b32e1192de34f2
- affected 4.14.247 – < 4.14.322
- affected 4.19.207 – < 4.19.291
- affected 5.4.146 – < 5.4.251
- affected 5.10.65 – < 5.10.188
- affected 4.4.284 – < 4.5
- affected 4.9.283 – < 4.10
- affected 5.13.17 – < 5.14
- affected 5.14.4 – < 5.15
- affected 5.15
- unaffected < 5.15
- unaffected 4.14.322 – ≤ 4.14.*
- unaffected 4.19.291 – ≤ 4.19.*
- unaffected 5.4.251 – ≤ 5.4.*
- unaffected 5.10.188 – ≤ 5.10.*
- unaffected 5.15.121 – ≤ 5.15.*
- unaffected 6.1.39 – ≤ 6.1.*
- unaffected 6.4.4 – ≤ 6.4.*
- unaffected 6.5 – ≤ *
References (8)
- https://git.kernel.org/stable/c/3e5a7bebf832b1482efe27bcc15a88c5b28a30d0 (opens in a new tab)
- https://git.kernel.org/stable/c/4da9edeccf77d7b4c6dbcb34d5908acdaa5bd7e3 (opens in a new tab)
- https://git.kernel.org/stable/c/fe9cdc19861950582f077f254a12026e169eaee5 (opens in a new tab)
- https://git.kernel.org/stable/c/56901de563359de20513e16a9ae008ae2c22e9a9 (opens in a new tab)
- https://git.kernel.org/stable/c/ecf26d6e1b5450620c214feea537bb6ce05c6741 (opens in a new tab)
- https://git.kernel.org/stable/c/dd9b7c89a80428cc5f4ae0d2e1311fdedb2a1aac (opens in a new tab)
- https://git.kernel.org/stable/c/38dbd6f72bfbeba009efe0e9ec1f3ff09f9e23fa (opens in a new tab)
- https://git.kernel.org/stable/c/342161c11403ea00e9febc16baab1d883d589d04 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53379)Record last updated .