CVE-2023-53573
MediumIn the Linux kernel, the following vulnerability has been resolved: clk: rs9: Fix suspend/resume Disabling the cache in commit 2ff4ba9e3702 ("clk: rs9: Fix I2C accessors") without removing cache synchronization in resume path results in a kernel panic as map->cache_ops is unset, due to REGCACHE_NONE. Enable flat cache again to support resume again. num_reg_defaults_raw is necessary to read the cache defaults from hardware. Some registers are strapped in hardware and cannot be provided in software.
CVSS 3.1 score
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected versions
Linux kernel versions
6.0.8,
6.1
and later are affected. Fixed in
6.1.25,
6.2.12,
6.3
and their respective stable series.
References
The following references provide additional information about CVE-2023-53573 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/632e04739c8f45c2d9ca4d4c5bd18d80c2ac9296
-
PatchKernel patch commithttps://git.kernel.org/stable/c/74f4471ad64214dd5046213ebdd6e0930da7bd2c
-
PatchKernel patch commithttps://git.kernel.org/stable/c/a983967602675880d6160a17ace2c0f48717ff33
Frequently asked questions
-
What is CVE-2023-53573?
CVE-2023-53573 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 6.0.8 onward and has been patched in 6.1.25, 6.2.12 and 6.3. CVE-2023-53573 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2023-53573?
CVE-2023-53573 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. -
Is there a patch available for CVE-2023-53573?
Yes — CVE-2023-53573 has been patched. Fixed versions include 6.1.25, 6.2.12 and 6.3. If you are running Linux kernel 6.0.8 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2023-53573 actively exploited?
No — CVE-2023-53573 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.