CVE-2023-52653
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-52653
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52653.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-52653
- Downstream
- Related
- Published
- 2024-05-01T13:15:48Z
- Modified
- 2025-08-09T19:01:29Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: fix a memleak in gssimportv2_context
The ctx->mechused.data allocated by kmemdup is not freed in neither gssimportv2context nor it only caller gsskrb5importseccontext, which frees ctx on error.
Thus, this patch reform the last call of gssimportv2context to the gsskrb5importctx_v2, preventing the memleak while keepping the return formation.
- References