In the Linux kernel, the following vulnerability has been resolved:

NTB: fix possible name leak in ntb_register_device()

If device_register() fails in ntb_register_device(), the device name
allocated by dev_set_name() should be freed. As per the comment in
device_register(), callers should use put_device() to give up the
reference in the error path. So fix this by calling put_device() in the
error path so that the name can be freed in kobject_cleanup().

As a result of this, put_device() in the error path of
ntb_register_device() is removed and the actual error is returned.

[mani: reworded commit message]
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 18 Sep 2025 14:45:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Mon, 04 Nov 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:40:53.901Z

Reserved: 2024-03-06T09:52:12.098Z

Link: CVE-2023-52652

cve-icon Vulnrichment

Updated: 2024-08-02T23:03:21.213Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-01T13:15:48.427

Modified: 2025-09-18T14:42:06.183

Link: CVE-2023-52652

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-01T00:00:00Z

Links: CVE-2023-52652 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-07-12T22:00:50Z