CVE-2023-53267

driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event()

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event()

The kfree() should be called when memory fails to be allocated for cb_data in xlnx_add_cb_for_notify_event(), otherwise there will be a memory leak, so add kfree() to fix it.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	05e5ba40ea7ab6a99bb8d6117c899d0e13ca8700 to before d35290addcbac94b076babe0a798a8c043421812Affected 05e5ba40ea7ab6a99bb8d6117c899d0e13ca8700 to before 9dfb6c784e385f6e61994bb4e16ce12f3e4940beAffected 05e5ba40ea7ab6a99bb8d6117c899d0e13ca8700 to before 1bea534991b9b35c41848a397666ada436456bebAffected
LinuxLinux	5.19Affected before 5.19Not affected 6.1.18 through 6.1.Not affected 6.2.5 through 6.2.Not affected 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.