CVE-2023-52661

drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()

Description

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() If clk_get_sys(..., "pll_d2_out0") fails, the clk_get_sys() call must be undone. Add the missing clk_put and a new 'put_pll_d_out0' label in the error handling path, and use it.

N/A

CVSS

Severity:

EPSS 0.20%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/5c8dc26e31b8b410ad1895e0d314def50c76eed0
https://git.kernel.org/stable/c/f3f407ccbe84a34de9be3195d22cdd5969f3fd9f
https://git.kernel.org/stable/c/845322a9c06dd1dcf35b6c4e3af89684297c23cc
https://git.kernel.org/stable/c/2388c36e028fff7f8ffd515681a14c6c2c07fea7
https://git.kernel.org/stable/c/fa74e4f5d0821829545b9f7034a0e577c205c101
https://git.kernel.org/stable/c/45c8034db47842b25a3ab6139d71e13b4e67b9b3

Frequently Asked Questions

What is the severity of CVE-2023-52661?: CVE-2023-52661 has not yet been assigned a CVSS score.
How to fix CVE-2023-52661?: To fix CVE-2023-52661, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-52661 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-52661 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-52661?: CVE-2023-52661 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.