CVE-2023-53514

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gpu: host1x: Fix memory leak of device names

The device names allocated by dev_set_name() need be freed before module unloading, but they can not be freed because the kobject's refcount which was set in device_initialize() has not be decreased to 0.

As comment of device_add() says, if it fails, use only put_device() drop the refcount, then the name will be freed in kobejct_cleanup().

device_del() and put_device() can be replaced with device_unregister(), so call it to unregister the added successfully devices, and just call put_device() to the not added device.

Add a release() function to device to avoid null release() function WARNING in device_release(), it's empty, because the context devices are freed together in host1x_memory_context_list_free().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f, < 958c6cbc32996c375af42db96ceba021a1959899; >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f, < dba1aeaaf3d0e2f996cb0a5609e5e85ecf405a5c; >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f, < 3ab0f5ddb761270b11d8c90b8550a59666cfc9bb; >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f, < 55879dad0f3ae8468444b42f785ad79eac05fe5b
LinuxLinux6.0

References

Timeline

Published
Oct 1, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-535157.8In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate lifCVE-2023-535167.8In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF The previCVE-2023-535175.5In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msg_max is too small in mtu negotiation WheCVE-2023-535185.5In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() srcu_init_notifier_heaCVE-2023-535195.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting belCVE-2023-53524.3The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts foCVE-2023-535204.7In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees thCVE-2023-535217.1In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUGCVE-2023-535227.8In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex syzbot is rCVE-2023-535235.5In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb devicCVE-2023-535247.8In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An CVE-2023-535255.5In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to join multicast only As for multicast: -
CVE-2023-53514: Medium severity, CVSS 5.5 | Vulnix