CVE-2023-53341

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: of/fdt: run soc memory setup when early_init_dt_scan_memory fails If memory has been found early_init_dt_scan_memory now returns 1. If it hasn't found any memory it will return 0, allowing other memory setup mechanisms to carry on. Previously early_init_dt_scan_memory always returned 0 without distinguishing between any kind of memory setup being done or not. Any code path after the early_init_dt_scan memory call in the ramips plat_mem_setup code wouldn't be executed anymore. Making early_init_dt_scan_memory the only way to initialize the memory. Some boards, including my mt7621 based Cudy X6 board, depend on memory initialization being done via the soc_info.mem_detect function pointer. Those wouldn't be able to obtain memory and panic the kernel during early bootup with the message "early_init_dt_alloc_memory_arch: Failed to allocate 12416 bytes align=0x40".

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedSep 17, 2025
First seenSep 17, 2025
Weakness typeCWE-908CWE-908

How to fix

Update
  • linux linux_kernel6.0.19, 6.1.5 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel5.17 ≤ v < 6.0.19, 6.1 ≤ v < 6.1.5, 6.26.0.19, 6.1.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.