CVE-2023-52652: linux
Vulnerability summary
CVE-2023-52652 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 18.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 26 · Related 26Timeline
- 01-05-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: NTB: fix possible name leak in ntb_register_device() If device_register() fails in ntb_register_device(), the device name allocated by dev_set_name() should be freed. As per the comment in device_register(), callers should use put_device() to give up the reference in the error path. So fix this by calling put_device() in the error path so that the name can be freed in kobject_cleanup(). As a result of this, put_device() in the error path of ntb_register_device() is removed and the actual error is returned. [mani: reworded commit message]
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
18%
Versus all other CVEs
30-day change
0.00 pp
From 0.27% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu117 products
- linuxAll versions (No fix recorded) | < 5.15.0-112.122 | < 6.8.0-35.35
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1063.69 | < 6.8.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b, < a62b9f3d7bbfac874cc0c638bc1776dcf1f8ec06 | ≥ a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b, < 6632a54ac8057cc0b0d789c6f73883e871bcd25c | ≥ a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b, < a039690d323221eb5865f1f31db3ec264e7a14b6 | ≥ a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b, < e8025439ef8e16029dc313d78a351ef192469b7b | ≥ a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b, < 913421f9f7fd8324dcc41753d0f28b52e177ef04 | ≥ a1bd3baeb2f18b2b3d0f98ce5fdaa725149b950b, < aebfdfe39b9327a3077d0df8db3beb3160c9bdd0 | 4.2
- linux_kernel≥ 4.2, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2
Debian1 product
- linux< 6.1.85-1 | < 6.7.12-1
3 vendors · 120 products
