PT-2025-38026

CVE-2023-53308

·

Published

2023-05-11

·

Updated

2026-10-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the networking subsystem related to the fec driver. Specifically, the issue arises when pm runtime get() fails within the .remove() function. This failure can lead to a resource leak and potentially a crash if driver callbacks are invoked after the device's register mapping has been freed. The problem occurs because the driver core ignores the error value returned during the removal process, continuing to remove the device despite the error.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1778276927
SUSE-SU-2025:03614-1
Found an issue in the description? Have something to add? Feel free to write us 👾