CVE-2023-53567: linux kernel — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.

Is your site exposed to CVE-2023-53567?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-401 CWE-401

Affected Products

Vendor	Product	Versions
linux	linux_kernel	3.15 — 4.19.283
linux	linux_kernel	4.20 — 5.4.243
linux	linux_kernel	5.5 — 5.10.180
linux	linux_kernel	5.11 — 5.15.111
linux	linux_kernel	5.16 — 6.1.28
linux	linux_kernel	6.2 — 6.2.15
linux	linux_kernel	6.3 — 6.3.2

References

Advisories & Patches

https://git.kernel.org/stable/c/2d0f63077f481f11a07f20eab1c1f4367dfaef32 https://git.kernel.org/stable/c/49c17fccae36505550c9121891722fff337f148a https://git.kernel.org/stable/c/55ecdcd12bc176b86fecbcb125ac814ac8fe857a https://git.kernel.org/stable/c/61f49171a43ab1f80c73c5c88c508770c461e0f2 https://git.kernel.org/stable/c/8632384337038b97910c2f7bb5a3f377aa68d001 https://git.kernel.org/stable/c/bc88243bbe6140d289bb32b4ee4607ba5ce1124a https://git.kernel.org/stable/c/f345d4d71e87d878437417ffbb9a7d4e16d235eb https://git.kernel.org/stable/c/fd53f41bd86daa39b454fd4637a908ff2123547f

Frequently Asked Questions

What is CVE-2023-53567? +

In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails. It has a CVSS v3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2023-53567? +

CVE-2023-53567 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2023-53567? +

CVE-2023-53567 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2023-53567? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-0646

A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability …

CVE-2026-20746

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when …

CVE-2026-53429

Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered …

CVE-2024-25450 8.8

imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().

CVE-2025-20133 8.6

A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall …

CVE-2025-20239 8.6

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall …

CVE-2023-53567