CVE-2023-53674

High

Description

In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_clk_notifier_register() devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on device detach and the allocated resource was leaked. Fix the issue by registering the resource through devres_add(). This issue was found with kmemleak on a Chromebook.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux Kernel
PublishedOct 7, 2025
First seenOct 7, 2025

How to fix

Update
  • linux linux_kernel5.15.121, 6.1.39, 6.3.13, 6.4.4 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel5.11 ≤ v < 5.15.121, 5.16 ≤ v < 6.1.39, 6.2 ≤ v < 6.3.13, 6.4 ≤ v < 6.4.45.15.121, 6.1.39, 6.3.13, 6.4.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-53674 · Linux Kernel · Dark Radar