Riskcovery

CVE-2023-53704

clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()

State
Published
Severity
Not scored
Published
Oct 22, 2025
Updated
May 11, 2026
Reserved
Oct 22, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()

Replace of_iomap() and kzalloc() with devm_of_iomap() and devm_kzalloc() which can automatically release the related memory when the device or driver is removed or unloaded to avoid potential memory leak.

In this case, iounmap(anatop_base) in line 427,433 are removed as manual release is not required.

Besides, referring to clk-imx8mq.c, check the return code of of_clk_add_hw_provider, if it returns negtive, print error info and unregister hws, which makes the program more robust.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to before cb047c13bbf9018693ae31f03a5a26b212d02f13Affected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to before bcea444ab4c045864b55d67313833d606676602aAffected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to before 6317d0302655f7e854cd4f31e93b47d35cb058bbAffected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to before 5bcf140e9e6cf76f1f1bd1f489a14ca4d49f9a1aAffected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to before 92ce7629a11ae62292e1cfaa6132dab081fc80eeAffected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to before 878b02d5f3b56cb090dbe2c70c89273be144087fAffected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 5.10.188 through 5.10.*Not affected
  • 5.15.121 through 5.15.*Not affected
  • 6.1.39 through 6.1.*Not affected
  • 6.3.13 through 6.3.*Not affected
  • 6.4.4 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.