CVE-2023-53572

clk: imx: scu: use _safe list iterator to avoid a use after free

State: Published
Severity: 7.0 High
Published: Oct 4, 2025
Updated: Aug 5, 2026
Reserved: Oct 4, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: imx: scu: use _safe list iterator to avoid a use after free

This loop is freeing "clk" so it needs to use list_for_each_entry_safe(). Otherwise it dereferences a freed variable to get the next item on the loop.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before f95ff838ac39f861d1f95a0f3bbb1e01c2517d79Affected 77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before 08cc7cd2c2a29a2abf5bceb8f048c0734d3694baAffected 77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before 3d90921f91fc6a8c801d527bb5848c99e335c1cfAffected 77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before 0a719f0e4b6f233979e219baff73923e76a96e09Affected 77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before 632c60ecd25dbacee54d5581fe3aeb834b57010aAffected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.3.13 through 6.3.Not affected 6.4.4 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before f95ff838ac39f861d1f95a0f3bbb1e01c2517d79Affected
77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before 08cc7cd2c2a29a2abf5bceb8f048c0734d3694baAffected
77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before 3d90921f91fc6a8c801d527bb5848c99e335c1cfAffected
77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before 0a719f0e4b6f233979e219baff73923e76a96e09Affected
77d8f3068c63ee0983f0b5ba3207d3f7cce11be4 to before 632c60ecd25dbacee54d5581fe3aeb834b57010aAffected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.3.13 through 6.3.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.