CVE-2023-53567

spi: qup: Don't skip cleanup in remove's error path

State: Published
Severity: Not scored
Published: Oct 4, 2025
Updated: May 11, 2026
Reserved: Oct 4, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: qup: Don't skip cleanup in remove's error path

Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	64ff247a978facc437d40f0c9b754675846a98f0 to before fd53f41bd86daa39b454fd4637a908ff2123547fAffected 64ff247a978facc437d40f0c9b754675846a98f0 to before 8632384337038b97910c2f7bb5a3f377aa68d001Affected 64ff247a978facc437d40f0c9b754675846a98f0 to before bc88243bbe6140d289bb32b4ee4607ba5ce1124aAffected 64ff247a978facc437d40f0c9b754675846a98f0 to before f345d4d71e87d878437417ffbb9a7d4e16d235ebAffected 64ff247a978facc437d40f0c9b754675846a98f0 to before 2d0f63077f481f11a07f20eab1c1f4367dfaef32Affected 64ff247a978facc437d40f0c9b754675846a98f0 to before 55ecdcd12bc176b86fecbcb125ac814ac8fe857aAffected 64ff247a978facc437d40f0c9b754675846a98f0 to before 49c17fccae36505550c9121891722fff337f148aAffected 64ff247a978facc437d40f0c9b754675846a98f0 to before 61f49171a43ab1f80c73c5c88c508770c461e0f2Affected
LinuxLinux	3.15Affected before 3.15Not affected 4.19.283 through 4.19.Not affected 5.4.243 through 5.4.Not affected 5.10.180 through 5.10.Not affected 5.15.111 through 5.15.Not affected 6.1.28 through 6.1.Not affected 6.2.15 through 6.2.Not affected 6.3.2 through 6.3.*Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

64ff247a978facc437d40f0c9b754675846a98f0 to before fd53f41bd86daa39b454fd4637a908ff2123547fAffected
64ff247a978facc437d40f0c9b754675846a98f0 to before 8632384337038b97910c2f7bb5a3f377aa68d001Affected
64ff247a978facc437d40f0c9b754675846a98f0 to before bc88243bbe6140d289bb32b4ee4607ba5ce1124aAffected
64ff247a978facc437d40f0c9b754675846a98f0 to before f345d4d71e87d878437417ffbb9a7d4e16d235ebAffected
64ff247a978facc437d40f0c9b754675846a98f0 to before 2d0f63077f481f11a07f20eab1c1f4367dfaef32Affected
64ff247a978facc437d40f0c9b754675846a98f0 to before 55ecdcd12bc176b86fecbcb125ac814ac8fe857aAffected
64ff247a978facc437d40f0c9b754675846a98f0 to before 49c17fccae36505550c9121891722fff337f148aAffected
64ff247a978facc437d40f0c9b754675846a98f0 to before 61f49171a43ab1f80c73c5c88c508770c461e0f2Affected

LinuxLinux

3.15Affected
before 3.15Not affected
4.19.283 through 4.19.*Not affected
5.4.243 through 5.4.*Not affected
5.10.180 through 5.10.*Not affected
5.15.111 through 5.15.*Not affected
6.1.28 through 6.1.*Not affected
6.2.15 through 6.2.*Not affected
6.3.2 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.