Not yet scoredPublished Dec 8, 2025

CVE-2023-53807clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider()

Updated under an hour ago (Oct 26, 2026, 6:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() Smatch detected this potential error pointer dereference clk_wzrd_register_divider(). If devm_clk_hw_register() fails then it sets "hw" to an error pointer and then dereferences it on the next line. Return the error directly instead.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	5a853722eb32188647a541802d51d0db423b9baf builds before 2f276dd9c0f835242836d9f6823035158ce2585c; from 5a853722eb32188647a541802d51d0db423b9baf before b35cb0c05b8dafe23ae5e8b605a91b88bcf4aba7; from 5a853722eb32188647a541802d51d0db423b9baf before 25dbdfb7b71ef8601d00c6d9a2b1a96de28b30c5; from 5a853722eb32188647a541802d51d0db423b9baf before f078a65ebf930f4305e3c415a8338d22391642c9; from 5a853722eb32188647a541802d51d0db423b9baf before 9c632a6396505a019ea6d12b5ab45e659a542a93	CNA record

References

References

https://git.kernel.org/stable/c/2f276dd9c0f835242836d9f6823035158ce2585c
https://git.kernel.org/stable/c/b35cb0c05b8dafe23ae5e8b605a91b88bcf4aba7
https://git.kernel.org/stable/c/25dbdfb7b71ef8601d00c6d9a2b1a96de28b30c5
https://git.kernel.org/stable/c/f078a65ebf930f4305e3c415a8338d22391642c9
https://git.kernel.org/stable/c/9c632a6396505a019ea6d12b5ab45e659a542a93

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.