CVE-2023-53264

clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe

State
Published
Severity
5.5 Medium
Published
Sep 16, 2025
Updated
May 11, 2026
Reserved
Sep 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe

Use devm_of_iomap() instead of of_iomap() to automatically handle the unused ioremap region. If any error occurs, regions allocated by kzalloc() will leak, but using devm_kzalloc() instead will automatically free the memory using devm_kfree().

Also, fix error handling of hws by adding unregister_hws label, which unregisters remaining hws when iomap failed.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 7154b046d8f3a441474ced1688eb348d42f5f165 to before 1839032251a66f2ae5a043c495532830a55d28c4Affected
  • 7154b046d8f3a441474ced1688eb348d42f5f165 to before 0fbdfd2542252e4c02e8158a06b7c0c9cfd40f99Affected
  • 7154b046d8f3a441474ced1688eb348d42f5f165 to before 02e54db221bb001b32f839e0149ee8d890ab9aa1Affected
  • 7154b046d8f3a441474ced1688eb348d42f5f165 to before 1b280598ab3bd8a2dc8b96a12530d5b1ee7a8f4aAffected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.39 through 6.1.*Not affected
  • 6.3.13 through 6.3.*Not affected
  • 6.4.4 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.