CVE-2023-53674

In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_clk_notifier_register() devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on device detach and the allocated resource was leaked. Fix the issue by registering the resource through devres_add(). This issue was found with kmemleak on a Chromebook.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/49451db71b746df990888068961f1033f7c9b734	Patch
https://git.kernel.org/stable/c/7fb933e56f77a57ef7cfc59fc34cbbf1b1fa31ff	Patch
https://git.kernel.org/stable/c/a326cf0107b197e649bbaa2a2b1355894826ce32	Patch
https://git.kernel.org/stable/c/cb1b04fd4283fc8f9acefe0ddc61ba072ed44877	Patch
https://git.kernel.org/stable/c/efbbda79b2881a04dcd0e8f28634933d79e17e49	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

28 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: clk: Corrección de fuga de memoria en devm_clk_notifier_register() devm_clk_notifier_register() asigna un recurso devres para el notificador clk pero no lo registró en el dispositivo, por lo que el notificador no se desregistró al desconectar el dispositivo y el recurso asignado se filtró. Se corrige el problema registrando el recurso a través de devres_add(). Este problema se detectó con kmemleak en un Chromebook.

Information

Published : 2025-10-07 16:15

Updated : 2026-10-28 20:10

NVD link : CVE-2023-53674

Mitre link : CVE-2023-53674

CVE.ORG link : CVE-2023-53674

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

{"id": "CVE-2023-53674", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6d30d50d037dfa092f9d5d1fffa348ab4abb7163", "lessThan": "a326cf0107b197e649bbaa2a2b1355894826ce32", "versionType": "git"}, {"status": "affected", "version": "6d30d50d037dfa092f9d5d1fffa348ab4abb7163", "lessThan": "49451db71b746df990888068961f1033f7c9b734", "versionType": "git"}, {"status": "affected", "version": "6d30d50d037dfa092f9d5d1fffa348ab4abb7163", "lessThan": "cb1b04fd4283fc8f9acefe0ddc61ba072ed44877", "versionType": "git"}, {"status": "affected", "version": "6d30d50d037dfa092f9d5d1fffa348ab4abb7163", "lessThan": "efbbda79b2881a04dcd0e8f28634933d79e17e49", "versionType": "git"}, {"status": "affected", "version": "6d30d50d037dfa092f9d5d1fffa348ab4abb7163", "lessThan": "7fb933e56f77a57ef7cfc59fc34cbbf1b1fa31ff", "versionType": "git"}], "programFiles": ["drivers/clk/clk.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.11"}, {"status": "unaffected", "version": "0", "lessThan": "5.11", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.121", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.39", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.3.13", "versionType": "semver", "lessThanOrEqual": "6.3.*"}, {"status": "unaffected", "version": "6.4.4", "versionType": "semver", "lessThanOrEqual": "6.4.*"}, {"status": "unaffected", "version": "6.5", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/clk/clk.c"], "defaultStatus": "affected"}]}], "published": "2025-10-07T16:15:51.370", "references": [{"url": "https://git.kernel.org/stable/c/49451db71b746df990888068961f1033f7c9b734", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7fb933e56f77a57ef7cfc59fc34cbbf1b1fa31ff", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a326cf0107b197e649bbaa2a2b1355894826ce32", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cb1b04fd4283fc8f9acefe0ddc61ba072ed44877", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/efbbda79b2881a04dcd0e8f28634933d79e17e49", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-401"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: Fix memory leak in devm_clk_notifier_register()\n\ndevm_clk_notifier_register() allocates a devres resource for clk\nnotifier but didn't register that to the device, so the notifier didn't\nget unregistered on device detach and the allocated resource was leaked.\n\nFix the issue by registering the resource through devres_add().\n\nThis issue was found with kmemleak on a Chromebook."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nclk: Correcci\u00f3n de fuga de memoria en devm_clk_notifier_register()\n\ndevm_clk_notifier_register() asigna un recurso devres para el notificador clk pero no lo registr\u00f3 en el dispositivo, por lo que el notificador no se desregistr\u00f3 al desconectar el dispositivo y el recurso asignado se filtr\u00f3.\n\nSe corrige el problema registrando el recurso a trav\u00e9s de devres_add().\n\nEste problema se detect\u00f3 con kmemleak en un Chromebook."}], "lastModified": "2026-10-28T20:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC77775B-EC31-4966-966C-1286C02B2A85", "versionEndExcluding": "5.15.121", "versionStartIncluding": "5.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BD1D4A1-304D-4187-8178-6D7C0050B1AF", "versionEndExcluding": "6.1.39", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95CB4836-7F5D-4C20-B025-8E046EC87B78", "versionEndExcluding": "6.3.13", "versionStartIncluding": "6.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AB81046-CB69-4115-924C-963B37C41385", "versionEndExcluding": "6.4.4", "versionStartIncluding": "6.4"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}