CVE-2023-53858 - Vulnerability Details

- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error

If clk_get_rate() fails, the clk that has just been allocated needs to be
freed.

Published: 2025-12-09

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`5f5a7a5578c5885201cf9c85856f023fe8b81765`	affected	< 755289d67eb9a74ae71bb624902e979c66859444
`5f5a7a5578c5885201cf9c85856f023fe8b81765`	affected	< f47e6631a8fcc6fe05b8644aa4222a60f3b0a927
`5f5a7a5578c5885201cf9c85856f023fe8b81765`	affected	< 30962268fa1a7466413b3d83037688129021d470
`5f5a7a5578c5885201cf9c85856f023fe8b81765`	affected	< a49e5a05121c8bc471a57b4916c5393749c24de5
`5f5a7a5578c5885201cf9c85856f023fe8b81765`	affected	< 073dbbe5743779faf24f233cc95459b47c7198dd
`5f5a7a5578c5885201cf9c85856f023fe8b81765`	affected	< 34f5b826dd509b76644f83094b4af7e7668a6a38
`5f5a7a5578c5885201cf9c85856f023fe8b81765`	affected	< 1694fc8ad734e2909a9e40d2be03cc4423e0bee6
`5f5a7a5578c5885201cf9c85856f023fe8b81765`	affected	< a9c09546e903f1068acfa38e1ee18bded7114b37

Linux

affected

Version	Status	Constraints
`3.3`	affected	—
`0`	unaffected	< 3.3
`4.14.322`	unaffected	≤ 4.14.*
`4.19.291`	unaffected	≤ 4.19.*
`5.4.251`	unaffected	≤ 5.4.*
`5.10.188`	unaffected	≤ 5.10.*
`5.15.121`	unaffected	≤ 5.15.*
`6.1.40`	unaffected	≤ 6.1.*
`6.4.5`	unaffected	≤ 6.4.*
`6.5`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00029.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/073dbbe5743779faf24f233cc95459b47c7198dd
https://git.kernel.org/stable/c/1694fc8ad734e2909a9e40d2be03cc4423e0bee6
https://git.kernel.org/stable/c/30962268fa1a7466413b3d83037688129021d470
https://git.kernel.org/stable/c/34f5b826dd509b76644f83094b4af7e7668a6a38
https://git.kernel.org/stable/c/755289d67eb9a74ae71bb624902e979c66859444
https://git.kernel.org/stable/c/a49e5a05121c8bc471a57b4916c5393749c24de5
https://git.kernel.org/stable/c/a9c09546e903f1068acfa38e1ee18bded7114b37
https://git.kernel.org/stable/c/f47e6631a8fcc6fe05b8644aa4222a60f3b0a927
https://lore.kernel.org/linux-cve-announce/2025120904-CVE-2023-53858-87d4@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-53858
https://www.cve.org/CVERecord?id=CVE-2023-53858

History

Wed, 10 Dec 2025 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025120904-CVE-2023-53858-87d4@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-53858 https://www.cve.org/CVERecord?id=CVE-2023-53858
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Tue, 09 Dec 2025 02:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error If clk_get_rate() fails, the clk that has just been allocated needs to be freed.
Title		tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/073dbbe5743779faf24f233cc95459b47c7198dd https://git.kernel.org/stable/c/1694fc8ad734e2909a9e40d2be03cc4423e0bee6 https://git.kernel.org/stable/c/30962268fa1a7466413b3d83037688129021d470 https://git.kernel.org/stable/c/34f5b826dd509b76644f83094b4af7e7668a6a38 https://git.kernel.org/stable/c/755289d67eb9a74ae71bb624902e979c66859444 https://git.kernel.org/stable/c/a49e5a05121c8bc471a57b4916c5393749c24de5 https://git.kernel.org/stable/c/a9c09546e903f1068acfa38e1ee18bded7114b37 https://git.kernel.org/stable/c/f47e6631a8fcc6fe05b8644aa4222a60f3b0a927

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-09T01:30:24.886Z

Updated: 2026-05-11T19:52:52.944Z

Reserved: 2025-12-09T01:27:17.828Z

Link: CVE-2023-53858

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-09T16:17:26.517

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-53858

Redhat

Severity : Low

Publid Date: 2025-12-09T00:00:00Z

Links: CVE-2023-53858 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object