CVE-2023-54097

regulator: stm32-pwr: fix of_iomap leak

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

regulator: stm32-pwr: fix of_iomap leak

Smatch reports: drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn: 'base' from of_iomap() not released on lines: 151,166.

In stm32_pwr_regulator_probe(), base is not released when devm_kzalloc() fails to allocate memory or devm_regulator_register() fails to register a new regulator device, which may cause a leak.

To fix this issue, replace of_iomap() with devm_platform_ioremap_resource(). devm_platform_ioremap_resource() is a specialized function for platform devices. It allows 'base' to be automatically released whether the probe function succeeds or fails.

Besides, use IS_ERR(base) instead of !base as the return value of devm_platform_ioremap_resource() can either be a pointer to the remapped memory or an ERR_PTR() encoded error code if the operation fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dc62f951a6a8490bcccc7b6de36cd85bd57be740 to before 824683dbec234a01bd49a0589ee3323594a6f4cfAffected
  • dc62f951a6a8490bcccc7b6de36cd85bd57be740 to before dfce9bb3517a78507cf96f9b83948d0b81338afaAffected
  • dc62f951a6a8490bcccc7b6de36cd85bd57be740 to before ad6481f49fb2c703efa3a929643934f24b666d6aAffected
  • dc62f951a6a8490bcccc7b6de36cd85bd57be740 to before f25994f7a9ad53eb756bc4869497c3ebe281ad5eAffected
  • dc62f951a6a8490bcccc7b6de36cd85bd57be740 to before c091bb49b3233307c7af73dae888f0799752af3dAffected
  • dc62f951a6a8490bcccc7b6de36cd85bd57be740 to before 0ad07e02be0d3f0d554653382ffe53ae4879378dAffected
  • dc62f951a6a8490bcccc7b6de36cd85bd57be740 to before c4a413e56d16a2ae84e6d8992f215c4dcc7fac20Affected
LinuxLinux
  • 5.2Affected
  • before 5.2Not affected
  • 5.4.243 through 5.4.*Not affected
  • 5.10.180 through 5.10.*Not affected
  • 5.15.111 through 5.15.*Not affected
  • 6.1.28 through 6.1.*Not affected
  • 6.2.15 through 6.2.*Not affected
  • 6.3.2 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.