CVE-2023-53567

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53567
In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2d0f63077f481f11a07f20eab1c1f4367dfaef32 Patch
https://git.kernel.org/stable/c/49c17fccae36505550c9121891722fff337f148a Patch
https://git.kernel.org/stable/c/55ecdcd12bc176b86fecbcb125ac814ac8fe857a Patch
https://git.kernel.org/stable/c/61f49171a43ab1f80c73c5c88c508770c461e0f2 Patch
https://git.kernel.org/stable/c/8632384337038b97910c2f7bb5a3f377aa68d001 Patch
https://git.kernel.org/stable/c/bc88243bbe6140d289bb32b4ee4607ba5ce1124a Patch
https://git.kernel.org/stable/c/f345d4d71e87d878437417ffbb9a7d4e16d235eb Patch
https://git.kernel.org/stable/c/fd53f41bd86daa39b454fd4637a908ff2123547f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Feb 2026, 14:42

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2d0f63077f481f11a07f20eab1c1f4367dfaef32 - () https://git.kernel.org/stable/c/2d0f63077f481f11a07f20eab1c1f4367dfaef32 - Patch
References () https://git.kernel.org/stable/c/49c17fccae36505550c9121891722fff337f148a - () https://git.kernel.org/stable/c/49c17fccae36505550c9121891722fff337f148a - Patch
References () https://git.kernel.org/stable/c/55ecdcd12bc176b86fecbcb125ac814ac8fe857a - () https://git.kernel.org/stable/c/55ecdcd12bc176b86fecbcb125ac814ac8fe857a - Patch
References () https://git.kernel.org/stable/c/61f49171a43ab1f80c73c5c88c508770c461e0f2 - () https://git.kernel.org/stable/c/61f49171a43ab1f80c73c5c88c508770c461e0f2 - Patch
References () https://git.kernel.org/stable/c/8632384337038b97910c2f7bb5a3f377aa68d001 - () https://git.kernel.org/stable/c/8632384337038b97910c2f7bb5a3f377aa68d001 - Patch
References () https://git.kernel.org/stable/c/bc88243bbe6140d289bb32b4ee4607ba5ce1124a - () https://git.kernel.org/stable/c/bc88243bbe6140d289bb32b4ee4607ba5ce1124a - Patch
References () https://git.kernel.org/stable/c/f345d4d71e87d878437417ffbb9a7d4e16d235eb - () https://git.kernel.org/stable/c/f345d4d71e87d878437417ffbb9a7d4e16d235eb - Patch
References () https://git.kernel.org/stable/c/fd53f41bd86daa39b454fd4637a908ff2123547f - () https://git.kernel.org/stable/c/fd53f41bd86daa39b454fd4637a908ff2123547f - Patch
CWE CWE-401
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

04 Oct 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-04 16:15

Updated : 2026-02-06 14:42

NVD link : CVE-2023-53567

Mitre link : CVE-2023-53567

CVE.ORG link : CVE-2023-53567

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime