CVE-2023-53758
spi: atmel-quadspi: Free resources even if runtime resume failed in .remove()
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() An early error exit in atmel_qspi_remove() doesn't prevent the device unbind. So this results in an spi controller with an unbound parent and unmapped register space (because devm_ioremap_resource() is undone). So using the remaining spi controller probably results in an oops. Instead unregister the controller unconditionally and only skip hardware access and clk disable. Also add a warning about resume failing and return zero unconditionally. The latter has the only effect to suppress a less helpful error message by the spi core.
Timeline
ID reserved
By Linux
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.19% · top 92% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 – < f6974fb20499e3b6522daa7aec822aac11dfcf42
- affected 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 – < 618770d4d8e40b7f8ed9eb5f210cd9164dfac47d
- affected 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 – < 77806d7c9bebe40a8cdce2b8d30fbe6511745df8
- affected 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 – < 9448bc1dee65f86c0fe64d9dea8b410af0586886
- affected 6.0
- unaffected < 6.0
- unaffected 6.1.28 – ≤ 6.1.*
- unaffected 6.2.15 – ≤ 6.2.*
- unaffected 6.3.2 – ≤ 6.3.*
- unaffected 6.4 – ≤ *
References (4)
- https://git.kernel.org/stable/c/f6974fb20499e3b6522daa7aec822aac11dfcf42 (opens in a new tab)
- https://git.kernel.org/stable/c/618770d4d8e40b7f8ed9eb5f210cd9164dfac47d (opens in a new tab)
- https://git.kernel.org/stable/c/77806d7c9bebe40a8cdce2b8d30fbe6511745df8 (opens in a new tab)
- https://git.kernel.org/stable/c/9448bc1dee65f86c0fe64d9dea8b410af0586886 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53758)Record last updated .