01 Record

CVE-2023-52838

fbdev: imsttfb: fix a resource leak in probe

MediumPUBLISHEDCNA: Linux

CNA base score6.2 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

fbdev: imsttfb: fix a resource leak in probe

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.25% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 16.4% of scored records. A rank, not a probability.

NVD base score

6.2 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-05-21 15:31Z2 YR AGO

Last updated

2026-05-23 15:27Z5 MO AGO

Reserved

2024-05-21

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 6.2)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-416Use After FreeVariant
CWE-402Transmission of Private Resources into a New Sphere ('Resource Leak')Class

Data version

5.2

Document digest

7f1950b8f77ff9e6ab56253b737bbc3544f8c14caf9ce01e133dd8ddde503324

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7f683f286a2196bd4d2da420a3194f5ba0269d8c to < 382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485, 815c95d82b79bb32e9aa7c95c6ac7cb1c92612cd to < 6c66d737b2726ac7784269ddf32a31634f8f269d, 2bf70b88cc358a437db376826f92c8dcf9c23587 to < a4dfebec32ec6d420a5506dd56a7834c91be28e4, ad3de274e065790181f112b9c72a2fb4665ee2fd to < 8e4b510fe91782522b7ca0ca881b663b5d35e513, c6c0a9f619584be19726ce7f81c31bc555af401a to < 7bc7b82fb2191b0d50a80ee4e27030918767dd1d, c75f5a55061091030a13fef71b9995b89bc86213 to < 18d26f9baca7d0d309303e3074a2252b8310884a, c75f5a55061091030a13fef71b9995b89bc86213 to < b346a531159d08c564a312a9eaeea691704f3c00, c75f5a55061091030a13fef71b9995b89bc86213 to < aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b, 64c6b84c73f576380fadeec2d30aaeccbc2994c7, 4c86974fb42281b8041a504d92ab341ad4697325, 4.19.291 to < 4.19.299, 5.4.251 to < 5.4.261, 5.10.188 to < 5.10.201, 5.15.116 to < 5.15.139, 6.1.33 to < 6.1.63, 4.14.322 to < 4.15, 6.3.7 to < 6.4, 6.4—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/382e1931e0c9cd58a5a8519cdc6cd9dc4d82b485
git.kernel.orghttps://git.kernel.org/stable/c/6c66d737b2726ac7784269ddf32a31634f8f269d
git.kernel.orghttps://git.kernel.org/stable/c/a4dfebec32ec6d420a5506dd56a7834c91be28e4
git.kernel.orghttps://git.kernel.org/stable/c/8e4b510fe91782522b7ca0ca881b663b5d35e513
git.kernel.orghttps://git.kernel.org/stable/c/7bc7b82fb2191b0d50a80ee4e27030918767dd1d
git.kernel.orghttps://git.kernel.org/stable/c/18d26f9baca7d0d309303e3074a2252b8310884a
git.kernel.orghttps://git.kernel.org/stable/c/b346a531159d08c564a312a9eaeea691704f3c00
git.kernel.orghttps://git.kernel.org/stable/c/aba6ab57a910ad4b940c2024d15f2cdbf5b7f76b

07 Fixed in

Debian 12

linux
Fixed in 6.1.64-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.6.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.6.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.