CVE-2023-53719

serial: arc_uart: fix of_iomap leak in `arc_serial_probe`

State: Published
Severity: Not scored
Published: Oct 22, 2025
Updated: May 11, 2026
Reserved: Oct 22, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

serial: arc_uart: fix of_iomap leak in `arc_serial_probe`

Smatch reports:

drivers/tty/serial/arc_uart.c:631 arc_serial_probe() warn: 'port->membase' from of_iomap() not released on lines: 631.

In arc_serial_probe(), if uart_add_one_port() fails, port->membase is not released, which would cause a resource leak.

To fix this, I replace of_iomap with devm_platform_ioremap_resource.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 3f00df24a5021a6f02c1830a290acd4bceb22a2dAffected 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 7525aa211758cc023a371e010d16ceaae1057807Affected 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 153017561d2804cfae87cc9aa377aa84dd906ae1Affected 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before f76a18e53a66c0ef2938276110717b3805720cd9Affected 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 081790eee6b47389a0d895262086d64c6a38d6e5Affected 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 40a462313ba4f337a2b419e7fb4a670f3dd95e14Affected 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 8ab5fc55d7f65d58a3c3aeadf11bdf60267cd2bdAffected
LinuxLinux	3.17Affected before 3.17Not affected 4.19.284 through 4.19.Not affected 5.4.244 through 5.4.Not affected 5.10.181 through 5.10.Not affected 5.15.113 through 5.15.Not affected 6.1.30 through 6.1.Not affected 6.3.4 through 6.3.Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 3f00df24a5021a6f02c1830a290acd4bceb22a2dAffected
8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 7525aa211758cc023a371e010d16ceaae1057807Affected
8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 153017561d2804cfae87cc9aa377aa84dd906ae1Affected
8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before f76a18e53a66c0ef2938276110717b3805720cd9Affected
8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 081790eee6b47389a0d895262086d64c6a38d6e5Affected
8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 40a462313ba4f337a2b419e7fb4a670f3dd95e14Affected
8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a to before 8ab5fc55d7f65d58a3c3aeadf11bdf60267cd2bdAffected

LinuxLinux

3.17Affected
before 3.17Not affected
4.19.284 through 4.19.*Not affected
5.4.244 through 5.4.*Not affected
5.10.181 through 5.10.*Not affected
5.15.113 through 5.15.*Not affected
6.1.30 through 6.1.*Not affected
6.3.4 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.