CVE-2023-53518

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

PM / devfreq: Fix leak in devfreq_dev_release()

srcu_init_notifier_head() allocates resources that need to be released with a srcu_cleanup_notifier_head() call.

Reported by kmemleak.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < 7462483446cb9986568ad7adae746ce5f18d2968; >= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < 64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d; >= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < 29811f4b8255d4238cf326f3bb7129784766beab; >= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < ab192e5e5d3b48415909a8408acfd007a607bcc0; >= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < 111bafa210ae546bee7644be730c42df9c35b66e; >= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < 8918025feb2f5f7c73f2495c158f22997e25cb02; >= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < 1640e9c72173911ad0fddb05012c01eafe082c4e; >= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < 3354c401c68d70567d1ef25d12f4e22a7813a3c6; >= 0fe3a66410a3ba96679be903f1e287d7a0a264a9, < 5693d077595de721f9ddbf9d37f40e5409707dfe
LinuxLinux4.7

References

Timeline

Published
Oct 1, 2025
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-535195.5In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting belCVE-2023-53524.3The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts foCVE-2023-535204.7In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees thCVE-2023-535217.1In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUGCVE-2023-535227.8In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex syzbot is rCVE-2023-535235.5In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb devicCVE-2023-535247.8In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An CVE-2023-535255.5In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to join multicast only As for multicast: - CVE-2023-535265.5In the Linux kernel, the following vulnerability has been resolved: jbd2: check 'jh->b_transaction' before removing it from checkpoint FolCVE-2023-535275.5In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() The mCVE-2023-535285.5In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If create_qp does not fullyCVE-2023-535295.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix memory leak in rtw88_usb Kmemleak shows the following
CVE-2023-53518: Medium severity, CVSS 5.5 | Vulnix