CVE-2023-53012: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: thermal: core: call put_device() only after device_register() fails put_device() shouldn't be called before a prior call to device_register(). __thermal_cooling_device_register() doesn't follow that properly and needs fixing. Also thermal_cooling_device_destroy_sysfs() is getting called unnecessarily on few error paths. Fix all this by placing the calls at the right place. Based on initial work done by Caleb Connolly.

Affected products

• Linux Linux Kernel: from 5.15.86, before 5.16 (fixed in 5.16); from 6.0.16, before 6.1 (fixed in 6.1); from 6.1.2, before 6.2 (fixed in 6.2); version 6.2 only

Published 2025-03-27. Last modified 2026-06-17.