CVE-2023-53225
MEDIUMLinux Kernel 3.16.57-3.17 - Use-After-Free in SPI IMX Driver
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: spi: imx: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.
References (6)
Core 6
Core References
Scores
CVSS v3
5.5
EPSS
0.0015
EPSS Percentile
4.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-401
Status
published
Products (29)
Linux/Linux
< 4.16
Linux/Linux
1333c3e996eb799286ee2ef2c01752da45bf926f
Linux/Linux
28ae79a518421348abfc2a2dffd6a6b6e3699476
Linux/Linux
3.16.57 - 3.17
Linux/Linux
3.18.94 - 3.19
Linux/Linux
4.1.50 - 4.2
Linux/Linux
4.14.17 - 4.15
Linux/Linux
4.15.1 - 4.16
Linux/Linux
4.16
Linux/Linux
4.4.115 - 4.5
... and 19 more
Published
Sep 15, 2025
Tracked Since
Feb 18, 2026