CVE-2023-53997
High
Description
In the Linux kernel, the following vulnerability has been resolved: thermal: of: fix double-free on unregistration Since commit 3d439b1a2ad3 ("thermal/core: Alloc-copy-free the thermal zone parameters structure"), thermal_zone_device_register() allocates a copy of the tzp argument and frees it when unregistering, so thermal_of_zone_register() now ends up leaking its original tzp and double-freeing the tzp copy. Fix this by locating tzp on stack instead.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linuxadce49089412a9ae28f5c666e0bb12fbcd86b3f7, ac4436a5b20e0ef1f608a9ef46c08d5d142f8da6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3d439b1a2ad36c8b4ea151c8de25309d60d17407 ≤ v < adce49089412a9ae28f5c666e0bb12fbcd86b3f7, 3d439b1a2ad36c8b4ea151c8de25309d60d17407 ≤ v < ac4436a5b20e0ef1f608a9ef46c08d5d142f8da6, 6.4 | adce49089412a9ae28f5c666e0bb12fbcd86b3f7, ac4436a5b20e0ef1f608a9ef46c08d5d142f8da6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.