CVE-2023-53225

spi: imx: Don't skip cleanup in remove's error path

State: Published
Severity: 5.5 Medium
Published: Sep 15, 2025
Updated: May 23, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: imx: Don't skip cleanup in remove's error path

Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	d593574aff0ab846136190b1729c151c736727ec to before aa93a46f998a9069368026ac52bba96868c59157Affected d593574aff0ab846136190b1729c151c736727ec to before f90822ad63d11301e425311dac0c8e12ca1737b8Affected d593574aff0ab846136190b1729c151c736727ec to before 6d16305a1535873e0a8a8ae92ea2d9106ec2d7dfAffected d593574aff0ab846136190b1729c151c736727ec to before 57a463226638f1ceabbb029cbd21b0c94640f1b5Affected d593574aff0ab846136190b1729c151c736727ec to before b64cb3f085fed296103c91f0db6acad30a021b36Affected d593574aff0ab846136190b1729c151c736727ec to before 11951c9e3f364d7ae3b568a0e52c8335d43066b5Affected fc58a98f1c98b22d31c53913cca38d5c43807cb4Affected 28ae79a518421348abfc2a2dffd6a6b6e3699476Affected b6aaaaed67b170a9841f0f598cd45ccbfe76e15eAffected f84a8d446a16379df5844bc2bd50f0b7431a4718Affected 1333c3e996eb799286ee2ef2c01752da45bf926fAffected cfd96cbd607ab5d63a33cd63673221f4d572ea8cAffected bac4bf53ca7c65d6c06808aab70c6caa0b9c78b9Affected 3.16.57 to before 3.17Affected 3.18.94 to before 3.19Affected 4.1.50 to before 4.2Affected 4.4.115 to before 4.5Affected 4.9.80 to before 4.10Affected 4.14.17 to before 4.15Affected 4.15.1 to before 4.16Affected
LinuxLinux	4.16Affected before 4.16Not affected 5.10.180 through 5.10.Not affected 5.15.111 through 5.15.Not affected 6.1.28 through 6.1.Not affected 6.2.15 through 6.2.Not affected 6.3.2 through 6.3.*Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

d593574aff0ab846136190b1729c151c736727ec to before aa93a46f998a9069368026ac52bba96868c59157Affected
d593574aff0ab846136190b1729c151c736727ec to before f90822ad63d11301e425311dac0c8e12ca1737b8Affected
d593574aff0ab846136190b1729c151c736727ec to before 6d16305a1535873e0a8a8ae92ea2d9106ec2d7dfAffected
d593574aff0ab846136190b1729c151c736727ec to before 57a463226638f1ceabbb029cbd21b0c94640f1b5Affected
d593574aff0ab846136190b1729c151c736727ec to before b64cb3f085fed296103c91f0db6acad30a021b36Affected
d593574aff0ab846136190b1729c151c736727ec to before 11951c9e3f364d7ae3b568a0e52c8335d43066b5Affected
fc58a98f1c98b22d31c53913cca38d5c43807cb4Affected
28ae79a518421348abfc2a2dffd6a6b6e3699476Affected
b6aaaaed67b170a9841f0f598cd45ccbfe76e15eAffected
f84a8d446a16379df5844bc2bd50f0b7431a4718Affected
1333c3e996eb799286ee2ef2c01752da45bf926fAffected
cfd96cbd607ab5d63a33cd63673221f4d572ea8cAffected
bac4bf53ca7c65d6c06808aab70c6caa0b9c78b9Affected
3.16.57 to before 3.17Affected
3.18.94 to before 3.19Affected
4.1.50 to before 4.2Affected
4.4.115 to before 4.5Affected
4.9.80 to before 4.10Affected
4.14.17 to before 4.15Affected
4.15.1 to before 4.16Affected

LinuxLinux

4.16Affected
before 4.16Not affected
5.10.180 through 5.10.*Not affected
5.15.111 through 5.15.*Not affected
6.1.28 through 6.1.*Not affected
6.2.15 through 6.2.*Not affected
6.3.2 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.