What’s Vulnerable › Vulnerabilities

CVE-2023-53225: spi: imx: Don't skip cleanup in remove's error path

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-15 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: spi: imx: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the device fails.

Affected products

• Linux kernel: from 3.16.57 before 3.17; from 3.18.94 before 3.19; from 4.1.50 before 4.2; from 4.4.115 before 4.5; from 4.9.80 before 4.10; from 4.14.17 before 4.15 — fixed in 3.17, 3.19, 4.10, 4.15, 4.2, 4.5

How to fix

Upgrade to a fixed version: Linux kernel 3.17, 3.19, 4.10, 4.15. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/11951c9e3f364d7ae3b568a0e52c8335d43066b5
• https://git.kernel.org/stable/c/57a463226638f1ceabbb029cbd21b0c94640f1b5
• https://git.kernel.org/stable/c/6d16305a1535873e0a8a8ae92ea2d9106ec2d7df
• https://git.kernel.org/stable/c/aa93a46f998a9069368026ac52bba96868c59157
• https://git.kernel.org/stable/c/b64cb3f085fed296103c91f0db6acad30a021b36
• https://git.kernel.org/stable/c/f90822ad63d11301e425311dac0c8e12ca1737b8

Get alerted when CVE-2023-53225 or the next vulnerability affects your stack