CVE-2023-53758
Description
In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() An early error exit in atmel_qspi_remove() doesn't prevent the device unbind. So this results in an spi controller with an unbound parent and unmapped register space (because devm_ioremap_resource() is undone). So using the remaining spi controller probably results in an oops. Instead unregister the controller unconditionally and only skip hardware access and clk disable. Also add a warning about resume failing and return zero unconditionally. The latter has the only effect to suppress a less helpful error message by the spi core.
How to fix
- Linux Linuxf6974fb20499e3b6522daa7aec822aac11dfcf42, 618770d4d8e40b7f8ed9eb5f210cd9164dfac47d, 77806d7c9bebe40a8cdce2b8d30fbe6511745df8, 9448bc1dee65f86c0fe64d9dea8b410af0586886 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 ≤ v < f6974fb20499e3b6522daa7aec822aac11dfcf42, 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 ≤ v < 618770d4d8e40b7f8ed9eb5f210cd9164dfac47d, 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 ≤ v < 77806d7c9bebe40a8cdce2b8d30fbe6511745df8, 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 ≤ v < 9448bc1dee65f86c0fe64d9dea8b410af0586886, 6.0 | f6974fb20499e3b6522daa7aec822aac11dfcf42, 618770d4d8e40b7f8ed9eb5f210cd9164dfac47d, 77806d7c9bebe40a8cdce2b8d30fbe6511745df8, 9448bc1dee65f86c0fe64d9dea8b410af0586886 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.