CVE-2023-53572: 
Linux Kernel vulnerability analysis and mitigation

A use-after-free vulnerability was discovered in the Linux kernel's clock (clk) subsystem, specifically in the IMX SCU component. The vulnerability was identified and disclosed on October 4, 2025. The issue affects the Linux kernel, particularly impacting Red Hat Enterprise Linux 9 systems (Red Hat).

The vulnerability stems from improper list iteration in the IMX SCU clock implementation. The code was using a regular list iterator while freeing a 'clk' element, which could lead to dereferencing a freed variable when attempting to get the next item in the loop. The correct implementation requires using the listforeachentrysafe() iterator to safely handle the list traversal while freeing elements. The vulnerability has been assigned a CVSS v3.1 base score of 7.0, indicating a moderate severity level (Red Hat).

The vulnerability could lead to a use-after-free condition in the Linux kernel, potentially resulting in system crashes, memory corruption, or privilege escalation. The issue specifically affects systems using the IMX SCU clock implementation (NVD).

The vulnerability has been patched in the Linux kernel. System administrators should apply the appropriate kernel updates when available. Red Hat Enterprise Linux 9 users should particularly ensure their systems are updated, as this version is confirmed to be affected (Red Hat).