BaseFortify

Publication date: 2025-10-07

Last updated on: 2026-02-26

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk When the best clk is searched, we iterate over all possible clk. If we find a better match, the previous one, if any, needs to be freed. If a better match has already been found, we still need to free the new one, otherwise it leaks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-07

Last Modified

2026-02-26

Generated

2026-07-06

AI Q&A

2025-10-07

EPSS Evaluated

2026-07-05

NVD

CVE-2023-53687

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak in the Linux kernel's samsung_tty serial driver. Specifically, in the function s3c24xx_serial_getclk(), when searching for the best clock (clk), the code iterates over all possible clocks. If a better clock is found, the previously allocated clock resource must be freed. However, if a better match has already been found, the new clock resource still needs to be freed to avoid leaking memory. The vulnerability occurs because this freeing step was missing, causing a memory leak.

Impact Analysis

This memory leak can cause the affected system to consume increasing amounts of memory over time when the samsung_tty serial driver is used, potentially leading to degraded system performance or instability if the leak is significant and persistent.

Hi! I’m here to help you understand CVE-2023-53687. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70