CVE-2023-53997 — Linux vulnerability
7 documents6 sources
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 92.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
thermal: of: fix double-free on unregistration
Since commit 3d439b1a2ad3 ("thermal/core: Alloc-copy-free the thermal
zone parameters structure"), thermal_zone_device_register() allocates
a copy of the tzp argument and frees it when unregistering, so
thermal_of_zone_register() now ends up leaking its original tzp and
double-freeing the tzp copy. Fix this by locating tzp on stack instead.
Affected Packages4 packages
▶CVEListV5linux/linux3d439b1a2ad36c8b4ea151c8de25309d60d17407 — adce49089412a9ae28f5c666e0bb12fbcd86b3f7+2
🔴Vulnerability Details
3OSV▶
CVE-2023-53997: In the Linux kernel, the following vulnerability has been resolved: thermal: of: fix double-free on unregistration Since commit 3d439b1a2ad3 ("thermal↗2025-12-24
GHSA▶
GHSA-hjrg-jf9q-4c95: In the Linux kernel, the following vulnerability has been resolved:
thermal: of: fix double-free on unregistration
Since commit 3d439b1a2ad3 ("therm↗2025-12-24