CVE-2023-54115

pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()

N/A
Published: December 24, 2025 at 01:06 PM UTC
Updated: June 17, 2026 at 06:46 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() When nonstatic_release_resource_db() frees all resources associated with an PCMCIA socket, it forgets to free socket_data too, causing a memory leak observable with kmemleak: unreferenced object 0xc28d1000 (size 64): comm "systemd-udevd", pid 297, jiffies 4294898478 (age 194.484s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 f0 85 0e c3 00 00 00 00 ................ 00 00 00 00 0c 10 8d c2 00 00 00 00 00 00 00 00 ................ backtrace: [<ffda4245>] __kmem_cache_alloc_node+0x2d7/0x4a0 [<7e51f0c8>] kmalloc_trace+0x31/0xa4 [<d52b4ca0>] nonstatic_init+0x24/0x1a4 [pcmcia_rsrc] [<a2f13e08>] pcmcia_register_socket+0x200/0x35c [pcmcia_core] [<a728be1b>] yenta_probe+0x4d8/0xa70 [yenta_socket] [<c48fac39>] pci_device_probe+0x99/0x194 [<84b7c690>] really_probe+0x181/0x45c [<8060fe6e>] __driver_probe_device+0x75/0x1f4 [<b9b76f43>] driver_probe_device+0x28/0xac [<648b766f>] __driver_attach+0xeb/0x1e4 [<6e9659eb>] bus_for_each_dev+0x61/0xb4 [<25a669f3>] driver_attach+0x1e/0x28 [<d8671d6b>] bus_add_driver+0x102/0x20c [<df0d323c>] driver_register+0x5b/0x120 [<942cd8a4>] __pci_register_driver+0x44/0x4c [<e536027e>] __UNIQUE_ID___addressable_cleanup_module188+0x1c/0xfffff000 [iTCO_vendor_support] Fix this by freeing socket_data too. Tested on a Acer Travelmate 4002WLMi by manually binding/unbinding the yenta_cardbus driver (yenta_socket).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.12 ≤ v < 4.14.3242.6.12 ≤ v < 4.19.2932.6.12 ≤ v < 5.10.1922.6.12 ≤ v < 5.15.1282.6.12 ≤ v < 5.4.2552.6.12 ≤ v < 6.1.472.6.12 ≤ v < 6.4.122.6.12 ≤ v < 6.51da177e4c3f41524e886b7f1b8a0c1fc7321cac22.6.12
Vendor states this is fixed in 04bb8af40a7729c398ed4caea7e66cedd2881719 (fixed)
Vendor states this is fixed in 22100df1d57f04cf2370d5347b9ef547f481deea (fixed)
Vendor states this is fixed in 2d45e2be0be35a3d66863563ed2591ee18a6897e (fixed)
Vendor states this is fixed in 97fd1c8e9c5aa833aab7e836760bc13103afa892 (fixed)
Vendor states this is fixed in bde0b6da7bd893c37afaee3555cc3ac3be582313 (fixed)
Vendor states this is fixed in c85fd9422fe0f5d667305efb27f56d09eab120b0 (fixed)
Vendor states this is fixed in e8a80cf06b4bb0396212289d651b384c949f09d0 (fixed)
Vendor states this is fixed in fd53a1f28faba2c4806c055e706a7721006291c1 (fixed)
Vendor states this is fixed in 2.6.12 (unaffected)
Vendor states this is fixed in 4.14.324 (unaffected)
Vendor states this is fixed in 4.19.293 (unaffected)
Vendor states this is fixed in 5.10.192 (unaffected)
Vendor states this is fixed in 5.15.128 (unaffected)
Vendor states this is fixed in 5.4.255 (unaffected)
Vendor states this is fixed in 6.1.47 (unaffected)
Vendor states this is fixed in 6.4.12 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card