Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-53012

thermal: core: call put_device() only after device_register() fails

Medium5.5EPSS 0.20%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: core: call put_device() only after device_register() fails put_device() shouldn't be called before a prior call to device_register(). __thermal_cooling_device_register() doesn't follow that properly and needs fixing. Also thermal_cooling_device_destroy_sysfs() is getting called unnecessarily on few error paths. Fix all this by placing the calls at the right place. Based on initial work done by Caleb Connolly.

Timeline

  1. ID reserved

    By Linux

  2. Published

  3. · 20 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-53012, by who scored it
Scored byCVSSScoreVector
NVDNVD · Analyzed3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.20% · top 90% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Affected products

  • Linux · Linux

    • affected 108a6f91e2766a6d9142b1f2d90c07ac547eae7e – < a7d736cc3c6cb0d7498bbfb56515d414e35e9510
    • affected 80bb3b901abe6560620505e5c734d140c4f73a07 – < 2846a7412f6246fd5171f51011bf76dfebcec0ee
    • affected c408b3d1d9bbc7de5fb0304fea424ef2539da616 – < 6c54b7bc8a31ce0f7cc7f8deef05067df414f1d8
    • affected 5139cbc0c6e4bf2fcffc9a7ed4350bf6985bc561
    • affected c4c435d3637b5d0abaa6447c7366c3674364968a
    • affected e0d8b51bbe84d6a98c162e06344de2d773d9e722
    • affected 6.0.16 – < 6.1

  • Linux · Linux

    All versions: unaffected

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-53012 badge
[![CVE-2023-53012](https://trackcve.app/badge/CVE-2023-53012.svg)](https://trackcve.app/cve/CVE-2023-53012)

Record last updated .