CVE-2023-52662

low-risk
Published 2024-05-17

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node When ida_alloc_max fails, resources allocated before should be freed, including *res allocated by kmalloc and ttm_resource_init.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (12)

Patch https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf
Patch https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a
Patch https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6
Patch https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5
Patch https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce
Patch https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876
Patch https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf
Patch https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a
Patch https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6
Patch https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5
Patch https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce
Patch https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal