Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: serial: arcuart: fix ofiomap leak in arcserialprobe. Matching reports: drivers/tty/serial/arcuart.c:631: In arcSerialprobe, if uartaddoneport fails, port-membase is not released, which could lead to a resource leak. To fix this...

The vulnerability of the arc_serial_probe() function in the drivers/tty/serial/arc_uart.c file of the console TTY driver in the Linux kernel’s serial port module allows a malicious actor to cause a service failure.

The vulnerability of the arcserialprobe function in the drivers/tty/serial/arcuart.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2023-53719 serial: arc_uart: fix of_iomap leak in `arc_serial_probe`

In the Linux kernel, the following vulnerability has been resolved: serial: arcuart: fix ofiomap leak in arcserialprobe Smatch reports: drivers/tty/serial/arcuart.c:631 arcserialprobe warn: 'port-membase' from ofiomap not released on lines: 631. In arcserialprobe, if uartaddoneport fails,...

CVE-2023-53719

CVE-2023-53719 is a Linux kernel issue in the arc_uart serial driver where an of_iomap() mapping is leaked in arc_serial_probe() if uart_add_one_port() fails, causing a resource leak. The connected advisories/entries confirm the root cause and the fix: replacing of_iomap with devm_platform_iorema...