DEBIAN-CVE-2023-52653

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/DEBIAN-CVE-2023-52653

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-52653.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2023-52653

Upstream

CVE-2023-52653

Published

2024-05-01T13:15:48Z

Modified

2025-09-19T06:18:00Z

Summary

[none]

Details

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gssimportv2context The ctx->mechused.data allocated by kmemdup is not freed in neither gssimportv2context nor it only caller gsskrb5importseccontext, which frees ctx on error. Thus, this patch reform the last call of gssimportv2context to the gsskrb5importctxv2, preventing the memleak while keepping the return formation.

References

https://security-tracker.debian.org/tracker/CVE-2023-52653

Affected packages

Debian:13 / linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.7.12-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.7.12-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}