CVE-2023-53264: clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe
In the Linux kernel, the following vulnerability has been resolved:
clk: imx: clk-imxrt1050: fix memory leak in imxrt1050clocksprobe
Use devmofiomap() instead of ofiomap() to automatically handle the unused ioremap region. If any error occurs, regions allocated by kzalloc() will leak, but using devmkzalloc() instead will automatically free the memory using devmkfree().
Also, fix error handling of hws by adding unregisterhws label, which unregisters remaining hws when iomap failed.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53264?
CVE-2023-53264 has been classified as a moderate severity vulnerability due to the potential for memory leaks.
How do I fix CVE-2023-53264?
To resolve CVE-2023-53264, update the Linux kernel to a version that implements the fix for the imxrt1050_clocks_probe memory leak.
What component is affected by CVE-2023-53264?
CVE-2023-53264 affects the imxrt1050 clock driver in the Linux kernel.
What issues can CVE-2023-53264 cause?
CVE-2023-53264 can lead to potential memory leaks, which may affect system performance over time.
Is CVE-2023-53264 executable remotely?
CVE-2023-53264 is not an executable remotely vulnerability as it requires local access to exploit the memory leak.