CVE-2023-53567
published 2025-10-04CVE-2023-53567: In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
spi: qup: Don't skip cleanup in remove's error path
Returning early in a platform driver's remove callback is wrong. In this
case the dma resources are not released in the error path. this is never
retried later and so this is a permanent leak. To fix this, only skip
hardware disabling if waking the device fails.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 64ff247a978facc437d40f0c9b754675846a98f0 < fd53f41bd86daa39b454fd4637a908ff2123547f | fd53f41bd86daa39b454fd4637a908ff2123547f |
| linux | linux | >= 64ff247a978facc437d40f0c9b754675846a98f0 < 8632384337038b97910c2f7bb5a3f377aa68d001 | 8632384337038b97910c2f7bb5a3f377aa68d001 |
| linux | linux | >= 64ff247a978facc437d40f0c9b754675846a98f0 < bc88243bbe6140d289bb32b4ee4607ba5ce1124a | bc88243bbe6140d289bb32b4ee4607ba5ce1124a |
| linux | linux | >= 64ff247a978facc437d40f0c9b754675846a98f0 < f345d4d71e87d878437417ffbb9a7d4e16d235eb | f345d4d71e87d878437417ffbb9a7d4e16d235eb |
| linux | linux | >= 64ff247a978facc437d40f0c9b754675846a98f0 < 2d0f63077f481f11a07f20eab1c1f4367dfaef32 | 2d0f63077f481f11a07f20eab1c1f4367dfaef32 |
| linux | linux | >= 64ff247a978facc437d40f0c9b754675846a98f0 < 55ecdcd12bc176b86fecbcb125ac814ac8fe857a | 55ecdcd12bc176b86fecbcb125ac814ac8fe857a |
| linux | linux | >= 64ff247a978facc437d40f0c9b754675846a98f0 < 49c17fccae36505550c9121891722fff337f148a | 49c17fccae36505550c9121891722fff337f148a |
| linux | linux | >= 64ff247a978facc437d40f0c9b754675846a98f0 < 61f49171a43ab1f80c73c5c88c508770c461e0f2 | 61f49171a43ab1f80c73c5c88c508770c461e0f2 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 3.15 < 4.19.283 | 4.19.283 |
| linux | linux_kernel | >= 4.20 < 5.4.243 | 5.4.243 |
| linux | linux_kernel | >= 5.11 < 5.15.111 | 5.15.111 |
| linux | linux_kernel | >= 5.16 < 6.1.28 | 6.1.28 |
| linux | linux_kernel | >= 5.5 < 5.10.180 | 5.10.180 |
| linux | linux_kernel | >= 6.2 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3 < 6.3.2 | 6.3.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: spi: qup: Don't skip cleanup in remove's error path
vendor_redhat·2025-10-04·CVSS 5.5
CVE-2023-53567 [MEDIUM] CWE-771 kernel: spi: qup: Don't skip cleanup in remove's error path
kernel: spi: qup: Don't skip cleanup in remove's error path
In the Linux kernel, the following vulnerability has been resolved:
spi: qup: Don't skip cleanup in remove's error path
Returning early in a platform driver's remove callback is wrong. In this
case the dma resources are not released in the error path. this is never
retried later and so this is a permanent leak. To fix this, only skip
hardware disabling if waking the device fails.
An incorrect error handling flaw was found in the Linux kernel's Qualcomm SPI driver in the device removal path.
A local privileged user who triggers device removal when the hardware fails to wake can cause DMA resources to leak permanently, as the driver returns early from the cleanup callback without releasing allocated resources. This leads to resour
Debian
CVE-2023-53567: linux - In the Linux kernel, the following vulnerability has been resolved: spi: qup: D...
vendor_debian·2023·CVSS 5.5
CVE-2023-53567 [MEDIUM] CVE-2023-53567: linux - In the Linux kernel, the following vulnerability has been resolved: spi: qup: D...
In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
GHSA
GHSA-84r8-h488-8mwc: In the Linux kernel, the following vulnerability has been resolved:
spi: qup: Don't skip cleanup in remove's error path
Returning early in a platfor
ghsa_unreviewed·2025-10-04
CVE-2023-53567 [MEDIUM] CWE-401 GHSA-84r8-h488-8mwc: In the Linux kernel, the following vulnerability has been resolved:
spi: qup: Don't skip cleanup in remove's error path
Returning early in a platfor
In the Linux kernel, the following vulnerability has been resolved:
spi: qup: Don't skip cleanup in remove's error path
Returning early in a platform driver's remove callback is wrong. In this
case the dma resources are not released in the error path. this is never
retried later and so this is a permanent leak. To fix this, only skip
hardware disabling if waking the device fails.
OSV
CVE-2023-53567: In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform
osv·2025-10-04·CVSS 5.5
CVE-2023-53567 [MEDIUM] CVE-2023-53567: In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform
In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/2d0f63077f481f11a07f20eab1c1f4367dfaef32https://git.kernel.org/stable/c/49c17fccae36505550c9121891722fff337f148ahttps://git.kernel.org/stable/c/55ecdcd12bc176b86fecbcb125ac814ac8fe857ahttps://git.kernel.org/stable/c/61f49171a43ab1f80c73c5c88c508770c461e0f2https://git.kernel.org/stable/c/8632384337038b97910c2f7bb5a3f377aa68d001https://git.kernel.org/stable/c/bc88243bbe6140d289bb32b4ee4607ba5ce1124ahttps://git.kernel.org/stable/c/f345d4d71e87d878437417ffbb9a7d4e16d235ebhttps://git.kernel.org/stable/c/fd53f41bd86daa39b454fd4637a908ff2123547f
2025-10-04
Published