CVE-2023-53758
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/12/2025
Last modified:
08/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
spi: atmel-quadspi: Free resources even if runtime resume failed in .remove()<br />
<br />
An early error exit in atmel_qspi_remove() doesn&#39;t prevent the device<br />
unbind. So this results in an spi controller with an unbound parent<br />
and unmapped register space (because devm_ioremap_resource() is undone).<br />
So using the remaining spi controller probably results in an oops.<br />
<br />
Instead unregister the controller unconditionally and only skip hardware<br />
access and clk disable.<br />
<br />
Also add a warning about resume failing and return zero unconditionally.<br />
The latter has the only effect to suppress a less helpful error message by<br />
the spi core.



