CVE-2023-52838 — CVE & Security Advisory Radar

🎯 CVE-2023-52838 MEDIUM 6.2 🔥 EPSS 25% 🇪🇺 EUVD

📄 .md Alle CVEs anzeigen ✕

CVE-2023-52838 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

In the Linux kernel, the following vulnerability has been resolved:

fbdev: imsttfb: fix a resource leak in probe

I've re-written the error handling but the bug is that if init_imstt()
fails we need to call iounmap(par->cmap_regs).

Klassifikation & Betroffenheit:

Linux Linux c6c0a9f619584be19726ce7f81c31bc555af401a <7bc7b82fb2191b0d50a80ee4e27030918767dd1dLinux patch: 5.10.201Linux 4c86974fb42281b8041a504d92ab341ad4697325Linux patch: 5.15.139Linux 815c95d82b79bb32e9aa7c95c6ac7cb1c92612cd <6c66d737b2726ac7784269ddf32a31634f8f269dLinux 5.10.188 <5.10.201Linux patch: 6.5.12Linux ad3de274e065790181f112b9c72a2fb4665ee2fd <8e4b510fe91782522b7ca0ca881b663b5d35e513

Improper Control of Generation of Code ('Code Injection') 🎯 Medium

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

🛡️ Empfohlene Mitigation: Refactor your program so that you do not have to dynamically generate code.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-35 · Leverage Executable Code in Non-Executab… (Very High) CAPEC-77 · Manipulating User-Controlled Variables (Very High) CAPEC-242 · Code Injection (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1027.006 · Obfuscated Files or Information: H… T1027.009 · Obfuscated Files or Information: E… T1564.009 · Hide Artifacts: Resource Forking

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-72487 7.7 CVE-2026-68340 7.7 CVE-2026-68255 7.7 CVE-2026-64524 7.7 CVE-2026-64456 7.7

🩹 Patch verfügbar (OSV):

🩹 Kernel ≥ 4.19.299 🩹 Kernel ≥ 5.4.261 🩹 Kernel ≥ 5.10.201 🩹 Kernel ≥ 5.15.139 🩹 Kernel ≥ 6.1.63 🩹 Kernel ≥ 6.5.12

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2023

Veröffentlicht 05/2024

Heute 11.09.

CVSS-Vektor-Analyse: 6.2

AV · Angriffsvektor Lokal

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Keine

I · Integrität Keine

A · Verfügbarkeit Hoch

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Veröffentlicht:21.05.2024

Aktualisiert:17.06.2026 06:43

Assigner (CNA):Linux

EUVD-ID:EUVD-2023-59644

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

Tier	2026-08-29	2026-09-11
≥90 %	4	0
≥50 %	4	0
≥10 %	3	0
<10 %	304	300

6.2 MEDIUM

🇪🇺 EUVD

EPSS

25%

CVE-2023-52838 💻 Lokal 🔓 Keine Authentifizierung nötig

Linux

CVE-2023-52838 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

21.05.2024

🛡️ Details ➔

CVE-2023-52838 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).

Zero-Day & Vulnerability Intelligence Hub

CVE-2023-52838 | In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is that if init_imstt() fails we need to call iounmap(par->cmap_regs).