CVE-2023-53012 (GCVE-0-2023-53012)
Vulnerability from cvelistv5
Published
2025-03-27 16:43
Modified
2025-05-04 12:50
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: thermal: core: call put_device() only after device_register() fails put_device() shouldn't be called before a prior call to device_register(). __thermal_cooling_device_register() doesn't follow that properly and needs fixing. Also thermal_cooling_device_destroy_sysfs() is getting called unnecessarily on few error paths. Fix all this by placing the calls at the right place. Based on initial work done by Caleb Connolly.
References
Impacted products
Vendor Product Version
Linux Linux Version: 108a6f91e2766a6d9142b1f2d90c07ac547eae7e
Version: 80bb3b901abe6560620505e5c734d140c4f73a07
Version: c408b3d1d9bbc7de5fb0304fea424ef2539da616
Version: 5139cbc0c6e4bf2fcffc9a7ed4350bf6985bc561
Version: c4c435d3637b5d0abaa6447c7366c3674364968a
Version: e0d8b51bbe84d6a98c162e06344de2d773d9e722
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/thermal/thermal_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a7d736cc3c6cb0d7498bbfb56515d414e35e9510",
              "status": "affected",
              "version": "108a6f91e2766a6d9142b1f2d90c07ac547eae7e",
              "versionType": "git"
            },
            {
              "lessThan": "2846a7412f6246fd5171f51011bf76dfebcec0ee",
              "status": "affected",
              "version": "80bb3b901abe6560620505e5c734d140c4f73a07",
              "versionType": "git"
            },
            {
              "lessThan": "6c54b7bc8a31ce0f7cc7f8deef05067df414f1d8",
              "status": "affected",
              "version": "c408b3d1d9bbc7de5fb0304fea424ef2539da616",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5139cbc0c6e4bf2fcffc9a7ed4350bf6985bc561",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c4c435d3637b5d0abaa6447c7366c3674364968a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "e0d8b51bbe84d6a98c162e06344de2d773d9e722",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/thermal/thermal_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux"
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.15.86",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.0.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.1.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: core: call put_device() only after device_register() fails\n\nput_device() shouldn\u0027t be called before a prior call to\ndevice_register(). __thermal_cooling_device_register() doesn\u0027t follow\nthat properly and needs fixing. Also\nthermal_cooling_device_destroy_sysfs() is getting called unnecessarily\non few error paths.\n\nFix all this by placing the calls at the right place.\n\nBased on initial work done by Caleb Connolly."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T12:50:04.932Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a7d736cc3c6cb0d7498bbfb56515d414e35e9510"
        },
        {
          "url": "https://git.kernel.org/stable/c/2846a7412f6246fd5171f51011bf76dfebcec0ee"
        },
        {
          "url": "https://git.kernel.org/stable/c/6c54b7bc8a31ce0f7cc7f8deef05067df414f1d8"
        }
      ],
      "title": "thermal: core: call put_device() only after device_register() fails",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53012",
    "datePublished": "2025-03-27T16:43:41.693Z",
    "dateReserved": "2025-03-27T16:40:15.749Z",
    "dateUpdated": "2025-05-04T12:50:04.932Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53012\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-03-27T17:15:50.290\",\"lastModified\":\"2025-03-28T18:11:40.180\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nthermal: core: call put_device() only after device_register() fails\\n\\nput_device() shouldn\u0027t be called before a prior call to\\ndevice_register(). __thermal_cooling_device_register() doesn\u0027t follow\\nthat properly and needs fixing. Also\\nthermal_cooling_device_destroy_sysfs() is getting called unnecessarily\\non few error paths.\\n\\nFix all this by placing the calls at the right place.\\n\\nBased on initial work done by Caleb Connolly.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: thermal: core: llamar a put_device() solo despu\u00e9s de que device_register() falle. No se debe llamar a put_device() antes de una llamada previa a device_register(). __thermal_cooling_device_register() no sigue esto correctamente y necesita soluci\u00f3n. Adem\u00e1s, se llama a thermal_cooling_device_destroy_sysfs() innecesariamente en algunas rutas de error. Para solucionar esto, coloque las llamadas en el lugar correcto. Basado en el trabajo inicial de Caleb Connolly.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2846a7412f6246fd5171f51011bf76dfebcec0ee\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6c54b7bc8a31ce0f7cc7f8deef05067df414f1d8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a7d736cc3c6cb0d7498bbfb56515d414e35e9510\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.