Vulnerability · Published Mar 2, 2024 · Assigned by Linux
CVE-2023-52529HID: sony: Fix a potential memory leak in sony_probe()
Medium 6.0
In plain English
A medium-severity resource allocation without limits in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.0Medium
Exploit odds (30 days)0.2%top 86.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sony_probe() If an error occurs after a successful usb_alloc_urb() call, usb_free_urb() should be called.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 7.3.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-debug | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-devel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-doc | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-headers | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-modules | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-tools | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | libperf | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | perf | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | python3-perf | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | rtla | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| AlmaLinux:9 | rv | 5.14.0-427.13.1.el9_4 | ALSA-2024:2394 |
| Debian:12 | linux | 6.1.64-1 | DEBIAN-CVE-2023-52529 |
| Debian:13 | linux | 6.5.8-1 | DEBIAN-CVE-2023-52529 |
| Debian:14 | linux | 6.5.8-1 | DEBIAN-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux | 5.15.0-94.104 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1053.58 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1056.64 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1056.64.1 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1051.59 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | 6.5.0-1013.13~22.04.1 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1050.55 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1036.42 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | 6.5.0-17.17~22.04.1 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1046.49 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1047.53 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1050.55 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-94.104 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | 6.5.0-17.17.1.1.1~22.04.1 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1044.44 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | 6.5.0-1014.14 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1022.22 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1009.9 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | 6.5.0-1014.15 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1051.57 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | 6.5.0-1015.15~22.04.1 | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1046.49 | UBUNTU-CVE-2023-52529 |
| Ubuntu:24.04:LTS | linux-raspi | 6.7.0-1001.1 | UBUNTU-CVE-2023-52529 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2023-52529 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1027.31 | UBUNTU-CVE-2023-52529 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | fb1a79a6b6e1223ddb18f12aa35e36f832da2290 – before bb0707fde7492121917fd9ddb43829e96ec0bb9efb1a79a6b6e1223ddb18f12aa35e36f832da2290 – before f237b17611fa3501f43f12d1cb64323e10fdcb4ffb1a79a6b6e1223ddb18f12aa35e36f832da2290 – before f566efa7de1e35e6523f4acbaf85068a540be07dfb1a79a6b6e1223ddb18f12aa35e36f832da2290 – before e1cd4004cde7c9b694bbdd8def0e02288ee58c7444535bbc811f56c0e241832cc7dcfd3d4222152402f04a3c5d74bd8842ce1ad44a2304e5b62a238f5.12.17 – before 5.135.13.2 – before 5.14 |
| Linux | Linux | 5.14 |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H