CVE-2023-53725: clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
In the Linux kernel, the following vulnerability has been resolved:
clocksource/drivers/cadence-ttc: Fix memory leak in ttctimerprobe
Smatch reports: drivers/clocksource/timer-cadence-ttc.c:529 ttctimerprobe() warn: 'timerbaseaddr' from ofiomap() not released on lines: 498,508,516.
timerbaseaddr may have the problem of not being released after use, I replaced it with the devmofiomap() function and added the clkput() function to cleanup the "clkce" and "clkcs".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53725?
CVE-2023-53725 is classified as a medium severity vulnerability due to its potential impact on system stability.
How do I fix CVE-2023-53725?
To fix CVE-2023-53725, update to the latest version of the Linux kernel where the vulnerability has been patched.
What type of vulnerability is CVE-2023-53725?
CVE-2023-53725 is a memory leak vulnerability that affects the ttc_timer_probe function in the Linux kernel.
Which software is affected by CVE-2023-53725?
CVE-2023-53725 affects the Linux kernel across various distributions that utilize the cadence-ttc timer driver.
Can CVE-2023-53725 lead to system crashes?
Yes, the memory leak in CVE-2023-53725 can potentially lead to system instability and crashes over time.