CVE-2023-53743: PCI: Free released resource after coalescing

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-08 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: Free released resource after coalescing release_resource() doesn't actually free the resource or resource list entry so free the resource list entry to avoid a leak.

Affected products

Linux kernel: from 6.1.40 before 6.1.53; from 6.4.5 before 6.4.16; from 5.15.181 before 5.16; 6.5 — fixed in 5.16, 6.1.53, 6.4.16, 6.6

How to fix

Upgrade to a fixed version: Linux kernel 5.16, 6.1.53, 6.4.16, 6.6. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/4443f3695d581ad1a55f2ef59259dcd0c52402b3
https://git.kernel.org/stable/c/8ec9c1d5d0a5a4744516adb483b97a238892f9d5
https://git.kernel.org/stable/c/a076e73dd6e619729e1af8d0d802fe52ac5eb2b3
https://git.kernel.org/stable/c/a08713b9d9031683b83b3ecf12bad40a1ca35211

Get alerted when CVE-2023-53743 or the next vulnerability affects your stack