{"id":"CVE-2023-53567","title":"spi: qup: Don't skip cleanup in remove's error path","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: qup: Don't skip cleanup in remove's error path\n\nReturning early in a platform driver's remove callback is wrong. In this\ncase the dma resources are not released in…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < fd53f41bd86daa39b454fd4637a908ff2123547f","Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 8632384337038b97910c2f7bb5a3f377aa68d001","Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < bc88243bbe6140d289bb32b4ee4607ba5ce1124a","Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < f345d4d71e87d878437417ffbb9a7d4e16d235eb","Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 2d0f63077f481f11a07f20eab1c1f4367dfaef32","Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 55ecdcd12bc176b86fecbcb125ac814ac8fe857a","Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 49c17fccae36505550c9121891722fff337f148a","Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 61f49171a43ab1f80c73c5c88c508770c461e0f2","Linux 3.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:23:50.985137Z"},"published":"2025-10-04","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:31:14.879Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-53567","references":[{"url":"https://git.kernel.org/stable/c/fd53f41bd86daa39b454fd4637a908ff2123547f"},{"url":"https://git.kernel.org/stable/c/8632384337038b97910c2f7bb5a3f377aa68d001"},{"url":"https://git.kernel.org/stable/c/bc88243bbe6140d289bb32b4ee4607ba5ce1124a"},{"url":"https://git.kernel.org/stable/c/f345d4d71e87d878437417ffbb9a7d4e16d235eb"},{"url":"https://git.kernel.org/stable/c/2d0f63077f481f11a07f20eab1c1f4367dfaef32"},{"url":"https://git.kernel.org/stable/c/55ecdcd12bc176b86fecbcb125ac814ac8fe857a"},{"url":"https://git.kernel.org/stable/c/49c17fccae36505550c9121891722fff337f148a"},{"url":"https://git.kernel.org/stable/c/61f49171a43ab1f80c73c5c88c508770c461e0f2"}],"tags":["cve.org"],"epss":0.00149,"epssPercentile":0.0409,"ingestedAt":"2026-11-05T22:38:31.809Z","slug":"CVE-2023-53567","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nspi: qup: Don't skip cleanup in remove's error path\n\nReturning early in a platform driver's remove callback is wrong. In this\ncase the dma resources are not released in the error path. this is never\nretried later and so this is a permanent leak. To fix this, only skip\nhardware disabling if waking the device fails.\n\n## Affected\n\n- `Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < fd53f41bd86daa39b454fd4637a908ff2123547f`\n- `Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 8632384337038b97910c2f7bb5a3f377aa68d001`\n- `Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < bc88243bbe6140d289bb32b4ee4607ba5ce1124a`\n- `Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < f345d4d71e87d878437417ffbb9a7d4e16d235eb`\n- `Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 2d0f63077f481f11a07f20eab1c1f4367dfaef32`\n- `Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 55ecdcd12bc176b86fecbcb125ac814ac8fe857a`\n- `Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 49c17fccae36505550c9121891722fff337f148a`\n- `Linux >= 64ff247a978facc437d40f0c9b754675846a98f0 < 61f49171a43ab1f80c73c5c88c508770c461e0f2`\n- `Linux 3.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}