GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-53518 (GCVE-0-2023-53518)

Vulnerability from cvelistv5 – Published: 2025-10-01 11:46 – Updated: 2026-08-05 09:14
VLAI
Title
PM / devfreq: Fix leak in devfreq_dev_release()
Summary
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() srcu_init_notifier_head() allocates resources that need to be released with a srcu_cleanup_notifier_head() call. Reported by kmemleak.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < 7462483446cb9986568ad7adae746ce5f18d2968 (git)
Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < 64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d (git)
Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < 29811f4b8255d4238cf326f3bb7129784766beab (git)
Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < ab192e5e5d3b48415909a8408acfd007a607bcc0 (git)
Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < 111bafa210ae546bee7644be730c42df9c35b66e (git)
Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < 8918025feb2f5f7c73f2495c158f22997e25cb02 (git)
Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < 1640e9c72173911ad0fddb05012c01eafe082c4e (git)
Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < 3354c401c68d70567d1ef25d12f4e22a7813a3c6 (git)
Affected: 0fe3a66410a3ba96679be903f1e287d7a0a264a9 , < 5693d077595de721f9ddbf9d37f40e5409707dfe (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.7
Unaffected: 0 , < 4.7 (semver)
Unaffected: 4.14.326 , ≤ 4.14.* (semver)
Unaffected: 4.19.295 , ≤ 4.19.* (semver)
Unaffected: 5.4.257 , ≤ 5.4.* (semver)
Unaffected: 5.10.195 , ≤ 5.10.* (semver)
Unaffected: 5.15.132 , ≤ 5.15.* (semver)
Unaffected: 6.1.53 , ≤ 6.1.* (semver)
Unaffected: 6.4.16 , ≤ 6.4.* (semver)
Unaffected: 6.5.3 , ≤ 6.5.* (semver)
Unaffected: 6.6 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/devfreq/devfreq.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7462483446cb9986568ad7adae746ce5f18d2968",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            },
            {
              "lessThan": "64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            },
            {
              "lessThan": "29811f4b8255d4238cf326f3bb7129784766beab",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            },
            {
              "lessThan": "ab192e5e5d3b48415909a8408acfd007a607bcc0",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            },
            {
              "lessThan": "111bafa210ae546bee7644be730c42df9c35b66e",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            },
            {
              "lessThan": "8918025feb2f5f7c73f2495c158f22997e25cb02",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            },
            {
              "lessThan": "1640e9c72173911ad0fddb05012c01eafe082c4e",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            },
            {
              "lessThan": "3354c401c68d70567d1ef25d12f4e22a7813a3c6",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            },
            {
              "lessThan": "5693d077595de721f9ddbf9d37f40e5409707dfe",
              "status": "affected",
              "version": "0fe3a66410a3ba96679be903f1e287d7a0a264a9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/devfreq/devfreq.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.7"
            },
            {
              "lessThan": "4.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.326",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.295",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.326",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.295",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.257",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.195",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.132",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.53",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.16",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.3",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "4.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: Fix leak in devfreq_dev_release()\n\nsrcu_init_notifier_head() allocates resources that need to be released\nwith a srcu_cleanup_notifier_head() call.\n\nReported by kmemleak."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The devfreq release path is reached only through local device-lifecycle operations \u2014 driver bind/unbind via sysfs, module load/unload, or a failed probe \u2014 with no remote or network-facing consumer of this code. There is no packet-driven or adjacent-network path into devfreq_dev_release().\nAC:L - The leak is deterministic \u2014 every devfreq device teardown unconditionally drops the srcu per-CPU allocations, so a repeated unbind/rebind loop reliably exhausts per-CPU memory. The attacker drives both the srcu grace-period activity (governor/notifier teardown) and the immediately following kfree(), so the dangling-work window is attacker-created rather than dependent on external state.\nPR:L - The trigger is a local device-management operation on the affected platform (GPU/UFS/bus devfreq drivers), consistent with how other driver teardown/unload memory-corruption issues are scored; no authentication to a remote service and no capability that is unreachable in practice on the affected embedded/Android deployments is needed.\nUI:N - The attacker performs the bind/unbind or module unload themselves in a loop; no victim action, mount, or file open is required for the leak or the dangling srcu work to occur.\nS:U - The leaked allocations and any resulting corruption are entirely within the kernel\u0027s own memory and security authority, with no crossing into a hypervisor, IOMMU, or other security domain.\nC:H - kfree()ing the devfreq object while the srcu_struct is still live leaves leaked per-CPU srcu_data with dangling -\u003essp pointers and pending srcu work into freed slab memory, a use-after-free that can be groomed to read back kernel data from the reallocated object.\nI:H - The uncleaned srcu_struct embeds a delayed_work and per-CPU timers that can fire after the containing allocation is freed, causing srcu state-machine writes (locks, sequence counters, work_struct/timer list links) into memory an attacker can reallocate \u2014 a write primitive into a controlled heap object.\nA:H - Each teardown leaks srcu_usage, the srcu_node tree, and a per-CPU srcu_data array; per-CPU memory is a scarce vmalloc-backed resource, so repeated cycles exhaust it and cause system-wide allocation failures, and the dangling timer/work references can additionally oops the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:35.040Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7462483446cb9986568ad7adae746ce5f18d2968"
        },
        {
          "url": "https://git.kernel.org/stable/c/64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d"
        },
        {
          "url": "https://git.kernel.org/stable/c/29811f4b8255d4238cf326f3bb7129784766beab"
        },
        {
          "url": "https://git.kernel.org/stable/c/ab192e5e5d3b48415909a8408acfd007a607bcc0"
        },
        {
          "url": "https://git.kernel.org/stable/c/111bafa210ae546bee7644be730c42df9c35b66e"
        },
        {
          "url": "https://git.kernel.org/stable/c/8918025feb2f5f7c73f2495c158f22997e25cb02"
        },
        {
          "url": "https://git.kernel.org/stable/c/1640e9c72173911ad0fddb05012c01eafe082c4e"
        },
        {
          "url": "https://git.kernel.org/stable/c/3354c401c68d70567d1ef25d12f4e22a7813a3c6"
        },
        {
          "url": "https://git.kernel.org/stable/c/5693d077595de721f9ddbf9d37f40e5409707dfe"
        }
      ],
      "title": "PM / devfreq: Fix leak in devfreq_dev_release()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53518",
    "datePublished": "2025-10-01T11:46:05.446Z",
    "dateReserved": "2025-10-01T11:39:39.407Z",
    "dateUpdated": "2026-08-05T09:14:35.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53518",
      "date": "2026-09-16",
      "epss": "0.00156",
      "percentile": "0.05131"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53518\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-10-01T12:15:56.027\",\"lastModified\":\"2026-08-04T10:19:10.357\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nPM / devfreq: Fix leak in devfreq_dev_release()\\n\\nsrcu_init_notifier_head() allocates resources that need to be released\\nwith a srcu_cleanup_notifier_head() call.\\n\\nReported by kmemleak.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/devfreq/devfreq.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"7462483446cb9986568ad7adae746ce5f18d2968\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"29811f4b8255d4238cf326f3bb7129784766beab\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"ab192e5e5d3b48415909a8408acfd007a607bcc0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"111bafa210ae546bee7644be730c42df9c35b66e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"8918025feb2f5f7c73f2495c158f22997e25cb02\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"1640e9c72173911ad0fddb05012c01eafe082c4e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"3354c401c68d70567d1ef25d12f4e22a7813a3c6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0fe3a66410a3ba96679be903f1e287d7a0a264a9\",\"lessThan\":\"5693d077595de721f9ddbf9d37f40e5409707dfe\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/devfreq/devfreq.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.7\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.7\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.326\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.295\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.257\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.195\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.132\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.53\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.4.16\",\"lessThanOrEqual\":\"6.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.3\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.7\",\"versionEndExcluding\":\"4.14.326\",\"matchCriteriaId\":\"F2DDCF6B-8718-4FED-9F84-D4AE1F88271B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.295\",\"matchCriteriaId\":\"D419C7D6-F33D-4EF8-8950-1CB5DDF6A55D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.257\",\"matchCriteriaId\":\"834BD148-28EC-43A4-A4F5-458124A1E39F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.195\",\"matchCriteriaId\":\"C385B650-53DB-4BFB-83D1-1D8FADF653EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.132\",\"matchCriteriaId\":\"5913891D-409A-4EEC-9231-F2EF5A493BC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.53\",\"matchCriteriaId\":\"B20754AF-3B8C-4574-A70D-EC24933810E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.4.16\",\"matchCriteriaId\":\"C3039EA3-F6CA-43EF-9F17-81A7EC6841EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5\",\"versionEndExcluding\":\"6.5.3\",\"matchCriteriaId\":\"880C803A-BEAE-4DA0-8A59-AC023F7B4EE3\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/111bafa210ae546bee7644be730c42df9c35b66e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1640e9c72173911ad0fddb05012c01eafe082c4e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/29811f4b8255d4238cf326f3bb7129784766beab\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3354c401c68d70567d1ef25d12f4e22a7813a3c6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5693d077595de721f9ddbf9d37f40e5409707dfe\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/64e6e0dc2d578c0a9e31cb4edd719f0a3ed98f6d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7462483446cb9986568ad7adae746ce5f18d2968\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8918025feb2f5f7c73f2495c158f22997e25cb02\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ab192e5e5d3b48415909a8408acfd007a607bcc0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T22:55:20+00:00",
      "cve": "CVE-2023-53518",
      "id": "CVE-2023-53518",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "108",
      "product_status:known_not_affected": "166",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Linux kernel: Memory leak in PM / devfreq can lead to denial of service",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53518.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-09-03T16:47:51Z",
      "cve": "CVE-2023-53518",
      "id": "CVE-2023-53518",
      "initial_release_date": "2025-10-01T23:29:43Z",
      "product_status:known_affected": "564",
      "product_status:known_not_affected": "45",
      "product_status:recommended": "516",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53518",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53518.json",
      "version": "49"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.