{"id":"CVE-2023-53514","title":"gpu: host1x: Fix memory leak of device names","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpu: host1x: Fix memory leak of device names\n\nThe device names allocated by dev_set_name() need be freed\nbefore module unloading, but they can not be freed because\nthe …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f < 958c6cbc32996c375af42db96ceba021a1959899","Linux >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f < dba1aeaaf3d0e2f996cb0a5609e5e85ecf405a5c","Linux >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f < 3ab0f5ddb761270b11d8c90b8550a59666cfc9bb","Linux >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f < 55879dad0f3ae8468444b42f785ad79eac05fe5b","Linux 6.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:22:48.085832Z"},"published":"2025-10-01","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:31:12.717Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-53514","references":[{"url":"https://git.kernel.org/stable/c/958c6cbc32996c375af42db96ceba021a1959899"},{"url":"https://git.kernel.org/stable/c/dba1aeaaf3d0e2f996cb0a5609e5e85ecf405a5c"},{"url":"https://git.kernel.org/stable/c/3ab0f5ddb761270b11d8c90b8550a59666cfc9bb"},{"url":"https://git.kernel.org/stable/c/55879dad0f3ae8468444b42f785ad79eac05fe5b"}],"tags":["cve.org"],"epss":0.00148,"epssPercentile":0.04023,"ingestedAt":"2026-11-05T22:38:31.805Z","slug":"CVE-2023-53514","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngpu: host1x: Fix memory leak of device names\n\nThe device names allocated by dev_set_name() need be freed\nbefore module unloading, but they can not be freed because\nthe kobject's refcount which was set in device_initialize()\nhas not be decreased to 0.\n\nAs comment of device_add() says, if it fails, use only\nput_device() drop the refcount, then the name will be\nfreed in kobejct_cleanup().\n\ndevice_del() and put_device() can be replaced with\ndevice_unregister(), so call it to unregister the added\nsuccessfully devices, and just call put_device() to the\nnot added device.\n\nAdd a release() function to device to avoid null release()\nfunction WARNING in device_release(), it's empty, because\nthe context devices are freed together in\nhost1x_memory_context_list_free().\n\n## Affected\n\n- `Linux >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f < 958c6cbc32996c375af42db96ceba021a1959899`\n- `Linux >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f < dba1aeaaf3d0e2f996cb0a5609e5e85ecf405a5c`\n- `Linux >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f < 3ab0f5ddb761270b11d8c90b8550a59666cfc9bb`\n- `Linux >= 8aa5bcb61612060429223d1fbb7a1c30a579fc1f < 55879dad0f3ae8468444b42f785ad79eac05fe5b`\n- `Linux 6.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}