CVE-2023-53225

MEDIUM

Linux Kernel 3.16.57-3.17 - Use-After-Free in SPI IMX Driver

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: spi: imx: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.

Scores

CVSS v3 5.5
EPSS 0.0015
EPSS Percentile 4.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (29)
Linux/Linux < 4.16
Linux/Linux 1333c3e996eb799286ee2ef2c01752da45bf926f
Linux/Linux 28ae79a518421348abfc2a2dffd6a6b6e3699476
Linux/Linux 3.16.57 - 3.17
Linux/Linux 3.18.94 - 3.19
Linux/Linux 4.1.50 - 4.2
Linux/Linux 4.14.17 - 4.15
Linux/Linux 4.15.1 - 4.16
Linux/Linux 4.16
Linux/Linux 4.4.115 - 4.5
... and 19 more
Published Sep 15, 2025
Tracked Since Feb 18, 2026