Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53758

spi: atmel-quadspi: Free resources even if runtime resume failed in .remove()

Description

In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() An early error exit in atmel_qspi_remove() doesn't prevent the device unbind. So this results in an spi controller with an unbound parent and unmapped register space (because devm_ioremap_resource() is undone). So using the remaining spi controller probably results in an oops. Instead unregister the controller unconditionally and only skip hardware access and clk disable. Also add a warning about resume failing and return zero unconditionally. The latter has the only effect to suppress a less helpful error message by the spi core.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 to < f6974fb20499e3b6522daa7aec822aac11dfcf42affected
  • 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 to < 618770d4d8e40b7f8ed9eb5f210cd9164dfac47daffected
  • 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 to < 77806d7c9bebe40a8cdce2b8d30fbe6511745df8affected
  • 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 to < 9448bc1dee65f86c0fe64d9dea8b410af0586886affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.1.28 to ≤ 6.1.*unaffected
  • 6.2.15 to ≤ 6.2.*unaffected
  • 6.3.2 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References