CVE-2023-53308

net: fec: Better handle pm_runtime_get() failing in .remove()

High · published September 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: fec: Better handle pm_runtime_get() failing in .remove()

In the (unlikely) event that pm_runtime_get() (disguised as

pm_runtime_resume_and_get()) fails, the remove callback returned an

error early. The problem with this is that the driver core ignores the

error value and continues removing the device. This results in a

resource leak. Worse the devm allocated resources are freed and so if a

callback of the driver is called later the register mapping is already

gone which probably results in a crash.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.9th percentile
Published
2025-09-16T16:11Z
EPSS history
Timeline
  • 16 SEP 16:11Z
    net: fec: Better handle pm_runtime_get() failing in .remove()
    cvelistv5