PT-2025-49488 · Linux · Linux Kernel

Published 2025-12-08 · Updated 2025-12-09 · CVE-2023-53758

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's quadspi driver related to resource management during device removal. Specifically, an early exit in the atmel qspi remove() function can lead to an unbound SPI controller with unmapped register space if runtime resume fails. This can cause system instability, potentially resulting in an oops. The issue is addressed by unconditionally unregistering the controller and adding a warning message for resume failures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53758

Affected Products

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53758.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-53758 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53758 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53758 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53758 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53758 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53758 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53758 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53758 · Vendor Advisory
• https://git.kernel.org/linus/9448bc1dee65f86c0fe64d9dea8b410af0586886 · Note
• https://git.kernel.org/stable/c/77806d7c9bebe40a8cdce2b8d30fbe6511745df8 · Note
• https://git.kernel.org/stable/c/618770d4d8e40b7f8ed9eb5f210cd9164dfac47d · Note
• https://git.kernel.org/stable/c/f6974fb20499e3b6522daa7aec822aac11dfcf42 · Note
• https://twitter.com/CVEnew/status/1997863653672968473 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note