CVE-2023-53617
published 2025-10-07CVE-2023-53617: In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree() in the later error handling in…
PriorityP415medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
soc: aspeed: socinfo: Add kfree for kstrdup
Add kfree() in the later error handling in order to avoid memory leak.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e0218dca5787c851b403fcbc33cdfec795446fca < dfb9676ed25be25ca7cd198d0f0e093b76b7bc7f | dfb9676ed25be25ca7cd198d0f0e093b76b7bc7f |
| linux | linux | >= e0218dca5787c851b403fcbc33cdfec795446fca < b662856b71343d9e731c1cd4bbe54758c7791abb | b662856b71343d9e731c1cd4bbe54758c7791abb |
| linux | linux | >= e0218dca5787c851b403fcbc33cdfec795446fca < d9a5ad4477d2a11e9b03f00c52694451e9332228 | d9a5ad4477d2a11e9b03f00c52694451e9332228 |
| linux | linux | >= e0218dca5787c851b403fcbc33cdfec795446fca < 6e6d847a8ce18ab2fbec4f579f682486a82d2c6b | 6e6d847a8ce18ab2fbec4f579f682486a82d2c6b |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.13-1 | 6.4.13-1 |
| linux | linux_kernel | >= 0 < 6.4.13-1 | 6.4.13-1 |
| linux | linux_kernel | >= 5.11 < 5.15.128 | 5.15.128 |
| linux | linux_kernel | >= 5.16 < 6.1.47 | 6.1.47 |
| linux | linux_kernel | >= 6.2 < 6.4.12 | 6.4.12 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: soc: aspeed: socinfo: Add kfree for kstrdup
vendor_redhat·2025-10-07·CVSS 5.5
CVE-2023-53617 [MEDIUM] kernel: soc: aspeed: socinfo: Add kfree for kstrdup
kernel: soc: aspeed: socinfo: Add kfree for kstrdup
In the Linux kernel, the following vulnerability has been resolved:
soc: aspeed: socinfo: Add kfree for kstrdup
Add kfree() in the later error handling in order to avoid memory leak.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Not affected
Debian
CVE-2023-53617: linux - In the Linux kernel, the following vulnerability has been resolved: soc: aspeed...
vendor_debian·2023·CVSS 5.5
CVE-2023-53617 [MEDIUM] CVE-2023-53617: linux - In the Linux kernel, the following vulnerability has been resolved: soc: aspeed...
In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree() in the later error handling in order to avoid memory leak.
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved
forky: resolved (fixed in 6.4.13-1)
sid: resolved (fixed in 6.4.13-1)
trixie: resolved (fixed in 6.4.13-1)
VulDB
Linux Kernel up to 5.15.127/6.1.46/6.4.11 kfree memory leak (WID-SEC-2025-2229)
vuldb·2026-04-20·CVSS 5.5
CVE-2023-53617 [MEDIUM] Linux Kernel up to 5.15.127/6.1.46/6.4.11 kfree memory leak (WID-SEC-2025-2229)
A vulnerability marked as critical has been reported in Linux Kernel up to 5.15.127/6.1.46/6.4.11. This affects the function kfree. The manipulation leads to memory leak.
This vulnerability is uniquely identified as CVE-2023-53617. The attack can only be initiated within the local network. No exploit exists.
It is suggested to upgrade the affected component.
GHSA
GHSA-9pvh-f984-w7rj: In the Linux kernel, the following vulnerability has been resolved:
soc: aspeed: socinfo: Add kfree for kstrdup
Add kfree() in the later error handl
ghsa_unreviewed·2025-10-07
CVE-2023-53617 [MEDIUM] CWE-401 GHSA-9pvh-f984-w7rj: In the Linux kernel, the following vulnerability has been resolved:
soc: aspeed: socinfo: Add kfree for kstrdup
Add kfree() in the later error handl
In the Linux kernel, the following vulnerability has been resolved:
soc: aspeed: socinfo: Add kfree for kstrdup
Add kfree() in the later error handling in order to avoid memory leak.
OSV
CVE-2023-53617: In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree() in the later error handlin
osv·2025-10-07·CVSS 5.5
CVE-2023-53617 [MEDIUM] CVE-2023-53617: In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree() in the later error handlin
In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree() in the later error handling in order to avoid memory leak.
No detection rules found.
No public exploits indexed.
2025-10-07
Published