NetSight
medium5.5

CVE-2023-53225

In the Linux kernel, the following vulnerability has been resolved: spi: imx: Don't skip cleanup in remove's error path Returning early in a platform driver's …

Impact

In the Linux kernel, the following vulnerability has been resolved: spi: imx: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.16.57 before 3.17
from 3.18.94 before 3.19
from 4.1.50 before 4.2
from 4.4.115 before 4.5
from 4.9.80 before 4.10
from 4.14.17 before 4.15

Weakness classification

References