CVE-2023-53255

firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()

State: Published
Severity: 5.5 Medium
Published: Sep 15, 2025
Updated: May 11, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()

svc_create_memory_pool() is only called from stratix10_svc_drv_probe(). Most of resources in the probe are managed, but not this memremap() call.

There is also no memunmap() call in the file.

So switch to devm_memremap() to avoid a resource leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	7ca5ce896524f5292e610b27d168269e5ab74951 to before e3373e6b6c79aff698442b00d20c9f285d296e46Affected 7ca5ce896524f5292e610b27d168269e5ab74951 to before c04ed61ebf01968d7699b121663982493ed577fbAffected 7ca5ce896524f5292e610b27d168269e5ab74951 to before 974ac045a05ad12a0b4578fb303f00dcc22f3abaAffected 7ca5ce896524f5292e610b27d168269e5ab74951 to before cb8a31a56df8492fb0d900959238e1a3ff8b8981Affected 7ca5ce896524f5292e610b27d168269e5ab74951 to before 7363de081c793e47866cb54ce7cb8a480cffc259Affected 7ca5ce896524f5292e610b27d168269e5ab74951 to before 1995f15590ca222f91193ed11461862b450abfd6Affected
LinuxLinux	5.0Affected before 5.0Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.40 through 6.1.Not affected 6.4.5 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

7ca5ce896524f5292e610b27d168269e5ab74951 to before e3373e6b6c79aff698442b00d20c9f285d296e46Affected
7ca5ce896524f5292e610b27d168269e5ab74951 to before c04ed61ebf01968d7699b121663982493ed577fbAffected
7ca5ce896524f5292e610b27d168269e5ab74951 to before 974ac045a05ad12a0b4578fb303f00dcc22f3abaAffected
7ca5ce896524f5292e610b27d168269e5ab74951 to before cb8a31a56df8492fb0d900959238e1a3ff8b8981Affected
7ca5ce896524f5292e610b27d168269e5ab74951 to before 7363de081c793e47866cb54ce7cb8a480cffc259Affected
7ca5ce896524f5292e610b27d168269e5ab74951 to before 1995f15590ca222f91193ed11461862b450abfd6Affected

LinuxLinux

5.0Affected
before 5.0Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.40 through 6.1.*Not affected
6.4.5 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.