---
cve: "CVE-2023-52670"
severity: "MEDIUM"
cvss: 6.6
epss: "29%"
vendor: "Linux"
kev: false
exploited: false
published: "2024-05-17 14:15:10"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-09T12:26:05+02:00"
---

# CVE-2023-52670

> 6.6 MEDIUM

## Beschreibung

In the Linux kernel, the following vulnerability has been resolved:

rpmsg: virtio: Free driver_override when rpmsg_remove()

Free driver_override when rpmsg_remove(), otherwise
the following memory leak will occur:

unreferenced object 0xffff0000d55d7080 (size 128):
  comm "kworker/u8:2", pid 56, jiffies 4294893188 (age 214.272s)
  hex dump (first 32 bytes):
    72 70 6d 73 67 5f 6e 73 00 00 00 00 00 00 00 00  rpmsg_ns........
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [] __kmem_cache_alloc_node+0x1f8/0x320
    [] __kmalloc_node_track_caller+0x44/0x70
    [] kstrndup+0x4c/0x90
    [] driver_set_override+0xd0/0x164
    [] rpmsg_register_device_override+0x98/0x170
    [] rpmsg_ns_register_device+0x24/0x30
    [] rpmsg_probe+0x2e0/0x3ec
    [] virtio_dev_probe+0x1c0/0x280
    [] really_probe+0xbc/0x2dc
    [] __driver_probe_device+0x78/0xe0
    [] driver_probe_device+0xd8/0x160
    [] __device_attach_driver+0xb8/0x140
    [] bus_for_each_drv+0x7c/0xd4
    [] __device_attach+0x9c/0x19c
    [] device_initial_probe+0x14/0x20
    [] bus_probe_device+0xa0/0xac

## CVSS-Vektor

```
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Physisch | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Patch verfügbar (OSV)

- Kernel ≥ 4.19.307
- Kernel ≥ 5.4.269
- Kernel ≥ 5.10.210
- Kernel ≥ 5.15.149
- Kernel ≥ 6.1.76
- Kernel ≥ 6.6.15
- Kernel ≥ 6.7.3

## Referenzen

- <https://git.kernel.org/stable/c/229ce47cbfdc7d3a9415eb676abbfb77d676cb08>
- <https://git.kernel.org/stable/c/dd50fe18c234bd5ff22f658f4d414e8fa8cd6a5d>
- <https://git.kernel.org/stable/c/69ca89d80f2c8a1f5af429b955637beea7eead30>
- <https://git.kernel.org/stable/c/2d27a7b19cb354c6d04bcdc9239e261ff29858d6>
- <https://git.kernel.org/stable/c/f4bb1d5daf77b1a95a43277268adf0d1430c2346>
- <https://git.kernel.org/stable/c/4e6cef3fae5c164968118a13f3fe293700adc81a>
- <https://git.kernel.org/stable/c/9a416d624e5fb7246ea97c11fbfea7e0e27abf43>
- <https://git.kernel.org/stable/c/d5362c37e1f8a40096452fc201c30e705750e687>
- <https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html>
- <https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2023-52670) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_