CVE-2023-53596

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the device resource management within the drivers base code. Specifically, device resources are not always freed when a device is unregistered, particularly in scenarios involving bus-less or driver-less devices. This occurs because the devres release all() function, responsible for releasing these resources, is not consistently called during device unregistration. The issue arises when a managed resource holds a reference to the device, preventing proper cleanup. The fix involves calling devres release all() in the device del() function to ensure resources are released even without a bus or driver. This change combines previous commits to address resource leaks effectively.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.