Vulnerability in Linux

CVE-2023-54009

In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path The cdns_i2c_master_xfer() function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currently one error path where the function exits directly, which leads to a leak of the runtime PM reference. Make sure that this error path also releases the runtime PM reference.

EPSS: 0.002 (7.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 1a351b10b9671fc2fac767c40a1c4373b9bf5092, 5.8, 0

References