CVE-2023-52457
highpriority · track · 31EPSS 0.002 · 14 %ileDEEURUUSEPSS · scored 2026-10-28
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed Returning an error code from .remove() makes the driver core emit the little helpful error message: remove callback returned a non-zero value. This will be ignored. and then remove the device anyhow. So all resources that were not freed are leaked in this case. Skipping serial8250_unregister_port() has the potential to keep enough of the UART around to trigger a use-after-free. So replace the error return (and with it the little helpful error message) by a more useful error message and continue to cleanup.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (83)
Products and version ranges known to be affected.
- IBM Business Automation Workflow 24.0.0all versionscert_bundDEcpe:/a:ibm:business_automation_workflow:24.0.0
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2024-0475Linux-Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische AngriffeDeutsch2024-02-25csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (25)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2023-52457/cnnvd
- https://git.kernel.org/stable/c/828cd829483f0cda920710997aed79130b0af690cnnvd
- https://git.kernel.org/stable/c/887a558d0298d36297daea039954c39940228d9bcnnvd
- https://git.kernel.org/stable/c/95e4e0031effad9837af557ecbfd4294a4d8aeeecnnvd
- https://git.kernel.org/stable/c/ad90d0358bd3b4554f243a425168fc7cebe7d04ecnnvd
- https://git.kernel.org/stable/c/b502fb43f7fb55aaf07f6092ab44657595214b93cnnvd
- https://git.kernel.org/stable/c/bc57f3ef8a9eb0180606696f586a6dcfaa175ed0cnnvd
- https://git.kernel.org/stable/c/d74173bda29aba58f822175d983d07c8ed335494cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan