Riskcovery

CVE-2023-53424

clk: mediatek: fix of_iomap memory leak

State
Published
Severity
5.5 Medium
Published
Sep 18, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: mediatek: fix of_iomap memory leak

Smatch reports: drivers/clk/mediatek/clk-mtk.c:583 mtk_clk_simple_probe() warn: 'base' from of_iomap() not released on lines: 496.

This problem was also found in linux-next. In mtk_clk_simple_probe(), base is not released when handling errors if clk_data is not existed, which may cause a leak. So free_base should be added here to release base.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • c58cd0e40ffac67961b945793876b973728f9b80 to before 847d5dd788ce05f0aaaa36ea174f7f0b9cf86f7dAffected
  • c58cd0e40ffac67961b945793876b973728f9b80 to before 2cae6a28d8c12c597e8656962271520434c61c48Affected
  • c58cd0e40ffac67961b945793876b973728f9b80 to before 47234e19b00816a8a7b278c7173f6d4e928c43c7Affected
  • c58cd0e40ffac67961b945793876b973728f9b80 to before 3db7285e044144fd88a356f5b641b9cd4b231a77Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.164 through 6.1.*Not affected
  • 6.3.13 through 6.3.*Not affected
  • 6.4.4 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.