CVE-2023-53488 — Improper Control of a Resource Through its Lifetime in Linux

CWE-664 — Improper Control of a Resource Through its Lifetime5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible that the update counters work might be pending, and may run after memory has been freed. Cancel the update counters work before freeing memory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel4.3 — 4.14.323+7
▶Debianlinux/linux_kernel< 5.10.191-1+3
▶CVEListV5linux/linux7724105686e718ac476a6ad3304fea2fbcfcffde — 5e72f33ddfdb69cb21c1b59d31bbd3498d31b14a+8
▶debiandebian/linux< linux 6.1.52-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53488: In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is poss↗2025-10-01
▶
GHSA
GHSA-67pv-grc5-6pf5: In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is po↗2025-10-01
▶

📋Vendor Advisories

2
Red Hat
kernel: IB/hfi1: Fix possible panic during hotplug remove↗2025-10-01
▶
Debian
CVE-2023-53488: linux - In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fi...↗2023
▶