CVE-2023-53997

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal: of: fix double-free on unregistration

Since commit 3d439b1a2ad3 ("thermal/core: Alloc-copy-free the thermal zone parameters structure"), thermal_zone_device_register() allocates a copy of the tzp argument and frees it when unregistering, so thermal_of_zone_register() now ends up leaking its original tzp and double-freeing the tzp copy. Fix this by locating tzp on stack instead.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 3d439b1a2ad36c8b4ea151c8de25309d60d17407, < adce49089412a9ae28f5c666e0bb12fbcd86b3f7; >= 3d439b1a2ad36c8b4ea151c8de25309d60d17407, < ac4436a5b20e0ef1f608a9ef46c08d5d142f8da6
LinuxLinux6.4

References

Timeline

Published
Dec 24, 2025
Last modified
Aug 4, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-53998In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data The virtio rng CVE-2023-53999In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix internal port memory leak The flow rule can be spliCVE-2023-54008.1Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability which could lead to aCVE-2023-54000In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix deadlock issue when externel_lb and reset are executed tCVE-2023-54001In the Linux kernel, the following vulnerability has been resolved: staging: r8712: Fix memory leak in _r8712_init_xmit_priv() In the abovCVE-2023-54002In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion of exclop condition when starting balance BalanceCVE-2023-54003In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when create_ah fails If AH create reCVE-2023-540047.5In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). sCVE-2023-54005In the Linux kernel, the following vulnerability has been resolved: binder: fix memory leak in binder_init() In binder_init(), the destrucCVE-2023-54006In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-race around unix_tot_inflight. unix_tot_inflight is CVE-2023-54007In the Linux kernel, the following vulnerability has been resolved: vmci_host: fix a race condition in vmci_host_poll() causing GPF DuringCVE-2023-54008In the Linux kernel, the following vulnerability has been resolved: virtio_vdpa: build affinity masks conditionally We try to build affini
CVE-2023-53997: High severity, CVSS 7.8 | Vulnix