CVE-2023-53424: clk: mediatek: fix of_iomap memory leak
In the Linux kernel, the following vulnerability has been resolved:
clk: mediatek: fix ofiomap memory leak
Smatch reports: drivers/clk/mediatek/clk-mtk.c:583 mtkclksimpleprobe() warn: 'base' from ofiomap() not released on lines: 496.
This problem was also found in linux-next. In mtkclksimpleprobe(), base is not released when handling errors if clkdata is not existed, which may cause a leak. So freebase should be added here to release base.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53424?
CVE-2023-53424 has been classified as a low-severity vulnerability due to its nature involving a memory leak.
How do I fix CVE-2023-53424?
To fix CVE-2023-53424, update the Linux kernel to the latest stable version where the memory leak has been addressed.
What component of the Linux kernel is affected by CVE-2023-53424?
CVE-2023-53424 affects the clk subsystem, specifically the MediaTek clock driver.
What are the potential consequences of CVE-2023-53424?
The potential consequences of CVE-2023-53424 include increased memory usage over time, which may lead to performance degradation.
Is CVE-2023-53424 being actively exploited?
As of now, there are no known active exploits for CVE-2023-53424, but it is advisable to apply patches to mitigate any risk.