Linux Kernel Vulnerability in NVMEM Core by Linux Foundation

CVE-2023-52929

What is CVE-2023-52929?

In the Linux Kernel, an issue within the NVMEM core has been identified where improper cleanup occurs if the dev_set_name() function fails. Specifically, this leads to a resource leak of the nvmem->wp_gpio during device registration. To mitigate this, a better approach involves restructuring the device registration process. By initializing the device early and employing the tested nvmem_release() cleanup code, we can enhance reliability and maintainability. This ensures the nvmem->id is correctly set up before any cleanup action is performed, thus preventing resource leaks.

References