CVE-2023-53674CWE-401

CVE-2023-53674

High · published October 7, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

clk: Fix memory leak in devm_clk_notifier_register()

devm_clk_notifier_register() allocates a devres resource for clk

notifier but didn't register that to the device, so the notifier didn't

get unregistered on device detach and the allocated resource was leaked.

Fix the issue by registering the resource through devres_add().

This issue was found with kmemleak on a Chromebook.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2025-10-07T20:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.11, < 5.15.1215.15.121
linux/linux_kernel≥ 5.16, < 6.1.396.1.39
linux/linux_kernel≥ 6.2, < 6.3.136.3.13
linux/linux_kernel≥ 6.4, < 6.4.46.4.4
References (5)
EPSS history
Timeline
  • 07 OCT 15:21Z
    clk: Fix memory leak in devm_clk_notifier_register()
    cvelistv5