Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2023-53617: Linux kernel ASPEED component could waste memory
CVE-2023-53617 · published 1 year ago
Summary
A part of the Linux kernel that supports ASPEED hardware could fail to release memory, leading to gradual performance loss. The issue has been fixed in recent kernel updates. Apply the latest kernel packages for your system to ensure the fix is in place.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1051.56~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1053.61~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1048.56~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-91.101~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1044.47~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1046.52~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-91.101~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1020.20~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1049.55~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1047.51~20.04.1.
- Update canonical linux to version 5.15.0-91.101.
- Update canonical linux-aws to version 5.15.0-1051.56.
- Update canonical linux-azure to version 5.15.0-1053.61.
- Update canonical linux-gcp to version 5.15.0-1048.56.
- Update canonical linux-gke to version 5.15.0-1048.53.
- Update canonical linux-gkeop to version 5.15.0-1034.40.
- Update canonical linux-ibm to version 5.15.0-1044.47.
- Update canonical linux-intel-iotg to version 5.15.0-1046.52.
- Update canonical linux-kvm to version 5.15.0-1048.53.
- Update canonical linux-lowlatency to version 5.15.0-91.101.
- Update canonical linux-nvidia to version 5.15.0-1042.42.
- Update canonical linux-nvidia-tegra to version 5.15.0-1020.20.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1007.7.
- Update canonical linux-oracle to version 5.15.0-1049.55.
- Update canonical linux-raspi to version 5.15.0-1044.47.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1027.31.
- Update canonical linux-bluefield to version 5.15.0-1033.35.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1044.46.
- Update canonical linux-realtime to version 5.15.0-1052.58.
- Update debian linux to version 6.1.52-1.
- Update debian linux to version 6.4.13-1.
- Update canonical linux-azure-fde to version 5.15.0-1053.61.1.
- Update linux kernel to version 6.4.12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.11, < 5.15.128 >= 5.16, < 6.1.47 >= 6.2, < 6.4.12 6.5 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1051.56~20.04.1 Fix: upgrade to 5.15.0-1051.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1053.61~20.04.1 Fix: upgrade to 5.15.0-1053.61~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1048.56~20.04.1 Fix: upgrade to 5.15.0-1048.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-91.101~20.04.1 Fix: upgrade to 5.15.0-91.101~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1044.47~20.04.1 Fix: upgrade to 5.15.0-1044.47~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1046.52~20.04.1 Fix: upgrade to 5.15.0-1046.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-91.101~20.04.1 Fix: upgrade to 5.15.0-91.101~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1020.20~20.04.1 Fix: upgrade to 5.15.0-1020.20~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1049.55~20.04.1 Fix: upgrade to 5.15.0-1049.55~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1047.51~20.04.1 Fix: upgrade to 5.15.0-1047.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
Showing 50 of 119. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-91.101 Fix: upgrade to 5.15.0-91.101
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1051.56 Fix: upgrade to 5.15.0-1051.56
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1053.61 Fix: upgrade to 5.15.0-1053.61
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1048.56 Fix: upgrade to 5.15.0-1048.56
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1048.53 Fix: upgrade to 5.15.0-1048.53
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1034.40 Fix: upgrade to 5.15.0-1034.40
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1044.47 Fix: upgrade to 5.15.0-1044.47
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1046.52 Fix: upgrade to 5.15.0-1046.52
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1048.53 Fix: upgrade to 5.15.0-1048.53
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-91.101 Fix: upgrade to 5.15.0-91.101
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1042.42 Fix: upgrade to 5.15.0-1042.42
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1020.20 Fix: upgrade to 5.15.0-1020.20
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1007.7 Fix: upgrade to 5.15.0-1007.7
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1049.55 Fix: upgrade to 5.15.0-1049.55
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1044.47 Fix: upgrade to 5.15.0-1044.47
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1033.35 Fix: upgrade to 5.15.0-1033.35
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1044.46 Fix: upgrade to 5.15.0-1044.46
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1052.58 Fix: upgrade to 5.15.0-1052.58
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 6.1.52-1 Fix: upgrade to 6.1.52-1
|
| Debian:13 | debian | linux |
< 6.4.13-1 Fix: upgrade to 6.4.13-1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1053.61.1 Fix: upgrade to 5.15.0-1053.61.1
|
| Linux | linux | kernel |
>= 6.2.0, < 6.4.12 Fix: upgrade to 6.4.12
|
Original advisory text
soc: aspeed: socinfo: Add kfree for kstrdup
In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree() in the later error handling in order to avoid memory leak.
References
- https://ubuntu.com/security/CVE-2023-53617 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-53617 Third Party Advisory
- https://git.kernel.org/linus/6e6d847a8ce18ab2fbec4f579f682486a82d2c6b Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-53617 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53617... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53617 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/6e6d847a8ce18ab2fbec4f579f682486a82d2c6b Third Party Advisory
- https://git.kernel.org/stable/c/b662856b71343d9e731c1cd4bbe54758c7791abb Third Party Advisory
- https://git.kernel.org/stable/c/d9a5ad4477d2a11e9b03f00c52694451e9332228 Third Party Advisory
- https://git.kernel.org/stable/c/dfb9676ed25be25ca7cd198d0f0e093b76b7bc7f Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-401Memory Leak
Timeline
Published7 Oct 2025
Updated3 Nov 2026
First seen6 Mar 2026
Sources
CVE-2023-53617 · NVD
UBUNTU-CVE-2023-53617 · OSV
DEBIAN-CVE-2023-53617 · OSV
CVE-2023-53617 · OSV
Track software like this
Free during beta