CVE-2023-53658

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-53658
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53658.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-53658
Downstream
Related
Published
2025-10-07T15:21:18.950Z
Modified
2026-05-28T03:53:37.843655236Z
Summary
spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
Details

In the Linux kernel, the following vulnerability has been resolved:

spi: bcm-qspi: return error if neither hif_mspi nor mspi is available

If neither a "hifmspi" nor "mspi" resource is present, the driver will just early exit in probe but still return success. Apart from not doing anything meaningful, this would then also lead to a null pointer access on removal, as platformget_drvdata() would return NULL, which it would then try to dereference when trying to unregister the spi master.

Fix this by unconditionally calling devmioremapresource(), as it can handle a NULL res and will then return a viable ERR_PTR() if we get one.

The "return 0;" was previously a "goto qspiresourceerr;" where then ret was returned, but since ret was still initialized to 0 at this place this was a valid conversion in 63c5395bb7a9 ("spi: bcm-qspi: Fix use-after-free on unbind"). The issue was not introduced by this commit, only made more obvious.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53658.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fa236a7ef24048bafaeed13f68df35a819794758
Fixed
a91c34357afcfaa5307e254f22a8452550a07b34
Fixed
d20db3c58a7f9361e370a7850ceb60dbdf62eea3
Fixed
398e6a015877d44327f754aeb48ff3354945c78c
Fixed
32b9c8f7892c19f7f5c9fed5fb410b9fd5990bb6
Fixed
217b6ea8cf7b819477bca597a6ae2d43d38ba283
Fixed
d3dcdb43c872a3b967345144151a2c9bb9124c9b
Fixed
22ae32d80ef590d12a2364e4621f90f7c58445c7
Fixed
7c1f23ad34fcdace50275a6aa1e1969b41c6233f

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53658.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.9.0
Fixed
4.14.322
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.291
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.251
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.188
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.121
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.39
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.4.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53658.json"