In the Linux kernel, the following vulnerability has been resolved:

spi: qup: Don't skip cleanup in remove's error path

Returning early in a platform driver's remove callback is wrong. In this
case the dma resources are not released in the error path. this is never
retried later and so this is a permanent leak. To fix this, only skip
hardware disabling if waking the device fails.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-60041 In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2d0f63077f481f11a07f20eab1c1f4367dfaef32 cve-icon cve-icon
https://git.kernel.org/stable/c/49c17fccae36505550c9121891722fff337f148a cve-icon cve-icon
https://git.kernel.org/stable/c/55ecdcd12bc176b86fecbcb125ac814ac8fe857a cve-icon cve-icon
https://git.kernel.org/stable/c/61f49171a43ab1f80c73c5c88c508770c461e0f2 cve-icon cve-icon
https://git.kernel.org/stable/c/8632384337038b97910c2f7bb5a3f377aa68d001 cve-icon cve-icon
https://git.kernel.org/stable/c/bc88243bbe6140d289bb32b4ee4607ba5ce1124a cve-icon cve-icon
https://git.kernel.org/stable/c/f345d4d71e87d878437417ffbb9a7d4e16d235eb cve-icon cve-icon
https://git.kernel.org/stable/c/fd53f41bd86daa39b454fd4637a908ff2123547f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100452-CVE-2023-53567-dedf@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53567 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53567 cve-icon
History

Mon, 06 Oct 2025 22:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Mon, 06 Oct 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 04 Oct 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.
Title spi: qup: Don't skip cleanup in remove's error path
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-04T15:17:09.350Z

Reserved: 2025-10-04T15:14:15.924Z

Link: CVE-2023-53567

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-04T16:15:52.223

Modified: 2025-10-06T14:56:21.733

Link: CVE-2023-53567

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-10-04T00:00:00Z

Links: CVE-2023-53567 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-06T14:41:07Z

Weaknesses

No weakness.