CVE-2023-53308 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pm_runtime_get() failing in .remove() In the (unlikely) event that pm_runtime_get() (disguised as pm_runtime_resume_and_get()) fails, the remove callback returned an error early. The problem with this is that the driver core ignores the error value and continues removing the device. This results in a resource leak. Worse the devm allocated resources are freed and so if a callback of the driver is called later the register mapping is already gone which probably results in a crash.
A vulnerability has been identified in the Linux kernel's handling of the FEC (Fast Ethernet Controller) driver during the device removal process. When the function pm_runtime_get() fails, the removal callback erroneously returns an error, which the driver core ignores, allowing the device to be removed while causing a resource leak. This issue is exacerbated by the premature release of resources managed by the device's driver, which can lead to a crash if the driver's callback is invoked later, as the necessary register mapping will have already been removed.
Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel's official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/83996d317b1deddc85006376082e8886f55aa709 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9407454a9b18bbeff216e8ecde87ffb2171e9ccf | kernel.org | Patch |
| https://git.kernel.org/stable/c/b22b514209ff8c4287abb853399890ab97e1b5ca | kernel.org | Patch |
| https://git.kernel.org/stable/c/be85912c36ddca3e8b2eef1b5392cd8db6bdb730 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c1bc2870f14e526a01897e14c747a0a0ca125231 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d52a0cca591e899d4e5c8ab19e067b4c6b7d104f | kernel.org | Patch |
| https://git.kernel.org/stable/c/e02d8d5b1602689b98d9b91550a11b9b57baedbe | kernel.org | Patch |
| https://git.kernel.org/stable/c/f816b9829b19394d318e01953aa3b2721bca040d | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-415 | Double Free | [email protected] |
| CWE-415 | Double Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.9.206, < 4.10 >= 4.14.158, < 4.14.316 >= 4.19.88, < 4.19.284 >= 5.3.15, < 5.4 >= 5.4.1, < 5.4.244 >= 5.5, < 5.10.181 >= 5.11, < 5.15.113 >= 5.16, < 6.1.30 >= 6.2, < 6.3.4 5.4 - 6.4 rc1 6.4 rc2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 14, 2026 | CVE Modified | CISA-ADP |
| Dec 1, 2025 | Initial Analysis | [email protected] |
| Sep 16, 2025 | New CVE Received | kernel.org |