CVE-2023-52989: firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
Vulnerability summary
CVE-2023-52989 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 18% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 27-03-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region This patch is fix for Linux kernel v2.6.33 or later. For request subaction to IEC 61883-1 FCP region, Linux FireWire subsystem have had an issue of use-after-free. The subsystem allows multiple user space listeners to the region, while data of the payload was likely released before the listeners execute read(2) to access to it for copying to user space. The issue was fixed by a commit 281e20323ab7 ("firewire: core: fix use-after-free regression in FCP handler"). The object of payload is duplicated in kernel space for each listener. When the listener executes ioctl(2) with FW_CDEV_IOC_SEND_RESPONSE request, the object is going to be released. However, it causes memory leak since the commit relies on call of release_request() in drivers/firewire/core-cdev.c. Against the expectation, the function is never called due to the design of release_client_resource(). The function delegates release task to caller when called with non-NULL fourth argument. The implementation of ioctl_send_response() is the case. It should release the object explicitly. This commit fixes the bug.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
18%
Versus all other CVEs
30-day change
Increase +0.01 pp
From 0.26% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu113 products
- linuxAll versions (No fix recorded) | < 4.15.0-211.222 | < 5.4.0-149.166 | < 5.15.0-72.79
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 4.15.0-1156.169 | < 5.4.0-1102.110 | < 5.15.0-1036.40
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 281e20323ab72180137824a298ee9e21e6f9acf6, < b2cd3947d116bb9ba7ff097b5fc747a8956764db | ≥ 281e20323ab72180137824a298ee9e21e6f9acf6, < 356ff89acdbe6a66019154bc7eb2d300f5b15103 | ≥ 281e20323ab72180137824a298ee9e21e6f9acf6, < 53785fd9b315583cf029e39f72b73d23704a2253 | ≥ 281e20323ab72180137824a298ee9e21e6f9acf6, < d5a2dcee53fa6e6e2822f93cb3f1b0cd23163bee | ≥ 281e20323ab72180137824a298ee9e21e6f9acf6, < 5f4543c9382ae2d5062f6aa4fecae0c9258d0b0e | ≥ 281e20323ab72180137824a298ee9e21e6f9acf6, < c8bdc88216f09cb7387fedbdf613524367328616 | ≥ 281e20323ab72180137824a298ee9e21e6f9acf6, < 531390a243ef47448f8bad01c186c2787666bf4d | 2.6.33
- linux_kernel≥ 2.6.33, < 4.14.306 | ≥ 4.15, < 4.19.273 | ≥ 4.20, < 5.4.232 | ≥ 5.5, < 5.10.168 | ≥ 5.11, < 5.15.93 | ≥ 5.16, < 6.1.11 | 6.2:rc1 | 6.2:rc2 | 6.2:rc3 | 6.2:rc4 | 6.2:rc5 | 6.2:rc6
Debian1 product
- linux< 6.1.11-1
3 vendors · 116 products
