PT-2025-38462 · Linux+4 · Linux Kernel+4

Published 2023-01-05 · Updated 2025-10-23 · CVE-2023-53443

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak was resolved in the arizona clock driver within the Linux kernel. The arizona clk32k enable() function incorrectly used pm runtime get sync(), which increases the reference count even when an error occurs. This was corrected by using pm runtime resume and get().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

CWE-911

Related Identifiers

ALSA-2025_16880

BDU:2025-12975

CESA-2023_7077

CVE-2023-53443

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 867

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53443.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-53443 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12975 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53443 · Vendor Advisory
• https://git.kernel.org/stable/c/7195e642b49af60d4120fa1b45bd812ba528174f · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53443 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53443 · Security Note
• https://git.kernel.org/stable/c/5a47bb71b1a94a279144fc3031d3c4591b38dd16 · Patch
• https://git.kernel.org/stable/c/9893771097b22a8743a446e45994a177795ca4da · Patch
• https://git.kernel.org/stable/c/4414a7ab80cebf715045e3c4d465feefbad21139 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53443 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/754e81ff44061dda68da0fd4ef51bd1aa9fbf2cf · Patch
• https://git.kernel.org/stable/c/dc9437e9889c3dacf1f320e3cf08da74127573fe · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory