CVE-2023-53743

PCI: Free released resource after coalescing

N/A

Published: December 8, 2025 at 01:19 AM UTC

Updated: June 17, 2026 at 06:45 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: Free released resource after coalescing release_resource() doesn't actually free the resource or resource list entry so free the resource list entry to avoid a leak.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 5.15.1815.15.181 ≤ v < 5.166.1.40 ≤ v < 6.1.536.4.5 ≤ v < 6.4.166.5 ≤ v < 6.5.36.5 ≤ v < 6.626277a4250207e630c9a11f4ead4ef6e8441bf1f465c195e86f3d0ffd2e250c4b78a5a1f11cc1b0a5.15.181 6.1.40 6.4.5 6.5b9bd8e34ec97615db4b64e043adf0cd643b16ed4e54223275ba1bc6f704a6bab015fcd2ae4f72572

Vendor states this is fixed in 4443f3695d581ad1a55f2ef59259dcd0c52402b3 (fixed)

Vendor states this is fixed in 8ec9c1d5d0a5a4744516adb483b97a238892f9d5 (fixed)

Vendor states this is fixed in a076e73dd6e619729e1af8d0d802fe52ac5eb2b3 (fixed)

Vendor states this is fixed in a08713b9d9031683b83b3ecf12bad40a1ca35211 (fixed)

Affected range stops below 5.16, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 6.1.53 (unaffected)

Vendor states this is fixed in 6.4.16 (unaffected)

Vendor states this is fixed in 6.5 (unaffected)

Vendor states this is fixed in 6.5.3 (unaffected)

Vendor states this is fixed in 6.6 (unaffected)