What is CVE-2023-53674?

CVE-2023-53674 is a high-severity vulnerability in Linux, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.8/10. Published 2025-10-07.

How severe is CVE-2023-53674?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2023-53674 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux

CVE-2023-53674

In the Linux kernel, the following vulnerability has been resolved: clk: Fix memory leak in devm_clk_notifier_register() devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on device detach and the allocated resource was leaked. Fix the issue by registering the resource through devres_add(). This issue was found with kmemleak on a Chromebook.

EPSS: 0.001 (3.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 6d30d50d037dfa092f9d5d1fffa348ab4abb7163, 5.11, 0
Linux Linux_kernel

Weakness classification (CWE)

CWE-401 — Missing Release of Memory after Effective Lifetime

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2023-53674?: CVE-2023-53674 is a high-severity vulnerability in Linux, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.8/10. Published 2025-10-07.
How severe is CVE-2023-53674?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2023-53674 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.