CVE-2023-53267: driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-16 · updated 2026-06-17
Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event() The kfree() should be called when memory fails to be allocated for cb_data in xlnx_add_cb_for_notify_event(), otherwise there will be a memory leak, so add kfree() to fix it.

Affected products

Linux kernel: from 5.19 before 6.1.18; from 6.2 before 6.2.5 — fixed in 6.1.18, 6.2.5

How to fix

Upgrade to a fixed version: Linux kernel 6.1.18, 6.2.5. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/1bea534991b9b35c41848a397666ada436456beb
https://git.kernel.org/stable/c/9dfb6c784e385f6e61994bb4e16ce12f3e4940be
https://git.kernel.org/stable/c/d35290addcbac94b076babe0a798a8c043421812

Get alerted when CVE-2023-53267 or the next vulnerability affects your stack