From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id EBEE71EE7B7 for ; Mon, 8 Dec 2025 01:20:15 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1765156816; cv=none; b=BEb5Cn+ObxtN/3IXSf1OMWKyPNc7ACt8Jr2t8pHtJ3MSu8fmtx6lyaoRberkECFquQIOYd1MuWI8QsvouSJOqzU/dUCuaxbjRQHzLir6vtq64oi2LZEBQNzmvY5ziUzgXZoI2kcR5xCUfkZtiGCtBgtDI7hUnNGygVerNGSiC00= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1765156816; c=relaxed/simple; bh=AxOpDSVMV+TnJaEmKAVRguW2+P+5dRuH+tCDT9W0nPA=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=rz8kKO92E18xLMorjt9DUkhmtQ4JAcLADtkoXn9Eftq8ulPdVkjbJUb0nFDepsGtf2CoOfJhyC/1+tc1qx8u9rMaK0jDhL2JcJXTATpU+rAYsLP6ocbURN1WIkIhWbc5RUSnpkJn+S3k/9rtYcERIlI6J/TO/pXmGFGODaur7+Q= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=Ar7q56Pc; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="Ar7q56Pc" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 01FA9C4CEFB; Mon, 8 Dec 2025 01:20:14 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1765156815; bh=AxOpDSVMV+TnJaEmKAVRguW2+P+5dRuH+tCDT9W0nPA=; h=From:To:Cc:Subject:Date:Reply-To:From; b=Ar7q56Pczu0y/gxSCVVsMIxm4hEc8Avv/vdQfwCQ0UWJghI2lHWRzlKZiJBA0mi6G QuTTbALDVeRUKdAWJbe6lXLcFBY6BR8bR+6rWIdsmui2jjm5LVDuZQPmwEgIO5IMIM ensMU4Mckytof0FIp23iPpqT59qahXebCa7svlrs= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2023-53758: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() Date: Mon, 8 Dec 2025 10:19:57 +0900 Message-ID: <2025120844-CVE-2023-53758-93a2@gregkh> X-Mailer: git-send-email 2.52.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=2786; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=JzqxIkmwyJqOKWLjZU09QR1dtzZOnKvesWJwOz3vroE=; b=owGbwMvMwCRo6H6F97bub03G02pJDJlm6ht+Jjzqf7/y3JSlrx4d/fl8jr4Le4JMlM+15pvHJ sx9L225qyOWhUGQiUFWTJHlyzaeo/srDil6GdqehpnDygQyhIGLUwAmMnUvwxz+ap/diqkh7Qxs T18X/Gr89oNh+U2GWUw7VRr3Xz/08O6EJnUz35jgiM8VvgA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() An early error exit in atmel_qspi_remove() doesn't prevent the device unbind. So this results in an spi controller with an unbound parent and unmapped register space (because devm_ioremap_resource() is undone). So using the remaining spi controller probably results in an oops. Instead unregister the controller unconditionally and only skip hardware access and clk disable. Also add a warning about resume failing and return zero unconditionally. The latter has the only effect to suppress a less helpful error message by the spi core. The Linux kernel CVE team has assigned CVE-2023-53758 to this issue. Affected and fixed versions =========================== Issue introduced in 6.0 with commit 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 and fixed in 6.1.28 with commit f6974fb20499e3b6522daa7aec822aac11dfcf42 Issue introduced in 6.0 with commit 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 and fixed in 6.2.15 with commit 618770d4d8e40b7f8ed9eb5f210cd9164dfac47d Issue introduced in 6.0 with commit 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 and fixed in 6.3.2 with commit 77806d7c9bebe40a8cdce2b8d30fbe6511745df8 Issue introduced in 6.0 with commit 4a2f83b7f78092a6d9e98fb5573d8f4b79c56336 and fixed in 6.4 with commit 9448bc1dee65f86c0fe64d9dea8b410af0586886 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2023-53758 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/spi/atmel-quadspi.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/f6974fb20499e3b6522daa7aec822aac11dfcf42 https://git.kernel.org/stable/c/618770d4d8e40b7f8ed9eb5f210cd9164dfac47d https://git.kernel.org/stable/c/77806d7c9bebe40a8cdce2b8d30fbe6511745df8 https://git.kernel.org/stable/c/9448bc1dee65f86c0fe64d9dea8b410af0586886