CVE-2023-53249

clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe

State: Published
Severity: 5.5 Medium
Published: Sep 15, 2025
Updated: May 11, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe

Use devm_of_iomap() instead of of_iomap() to automatically handle the unused ioremap region.

If any error occurs, regions allocated by kzalloc() will leak, but using devm_kzalloc() instead will automatically free the memory using devm_kfree().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 294321349bd3b0680847fc2bbe66b9ab3e522feaAffected 96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 50b5ddde8fad5f0ffd239029d0956af633a0f9b1Affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 9ba3693b0350b154fdd7830559bbc7b04c067096Affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 9428cf0fbf4be9a24f3e15a0c166b861b12666afAffected 96d6392b54dbb1ff2b39448a2516fa6abb33114b to before d4fa5e47af1e7bb2bbcaac062b14216c00e92148Affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 188d070de9132667956f5aadd98d2bd87d3eac89Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.3.13 through 6.3.Not affected 6.4.4 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 294321349bd3b0680847fc2bbe66b9ab3e522feaAffected
96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 50b5ddde8fad5f0ffd239029d0956af633a0f9b1Affected
96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 9ba3693b0350b154fdd7830559bbc7b04c067096Affected
96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 9428cf0fbf4be9a24f3e15a0c166b861b12666afAffected
96d6392b54dbb1ff2b39448a2516fa6abb33114b to before d4fa5e47af1e7bb2bbcaac062b14216c00e92148Affected
96d6392b54dbb1ff2b39448a2516fa6abb33114b to before 188d070de9132667956f5aadd98d2bd87d3eac89Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.3.13 through 6.3.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.