CVE-2023-53514
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/10/2025
Last modified:
23/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
gpu: host1x: Fix memory leak of device names<br />
<br />
The device names allocated by dev_set_name() need be freed<br />
before module unloading, but they can not be freed because<br />
the kobject&#39;s refcount which was set in device_initialize()<br />
has not be decreased to 0.<br />
<br />
As comment of device_add() says, if it fails, use only<br />
put_device() drop the refcount, then the name will be<br />
freed in kobejct_cleanup().<br />
<br />
device_del() and put_device() can be replaced with<br />
device_unregister(), so call it to unregister the added<br />
successfully devices, and just call put_device() to the<br />
not added device.<br />
<br />
Add a release() function to device to avoid null release()<br />
function WARNING in device_release(), it&#39;s empty, because<br />
the context devices are freed together in<br />
host1x_memory_context_list_free().
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.0 (including) | 6.1.28 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.2.15 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.3 (including) | 6.3.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



