Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53704

clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()

Description

In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() Replace of_iomap() and kzalloc() with devm_of_iomap() and devm_kzalloc() which can automatically release the related memory when the device or driver is removed or unloaded to avoid potential memory leak. In this case, iounmap(anatop_base) in line 427,433 are removed as manual release is not required. Besides, referring to clk-imx8mq.c, check the return code of of_clk_add_hw_provider, if it returns negtive, print error info and unregister hws, which makes the program more robust.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to < cb047c13bbf9018693ae31f03a5a26b212d02f13affected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to < bcea444ab4c045864b55d67313833d606676602aaffected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to < 6317d0302655f7e854cd4f31e93b47d35cb058bbaffected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to < 5bcf140e9e6cf76f1f1bd1f489a14ca4d49f9a1aaffected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to < 92ce7629a11ae62292e1cfaa6132dab081fc80eeaffected
  • 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 to < 878b02d5f3b56cb090dbe2c70c89273be144087faffected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.188 to ≤ 5.10.*unaffected
  • 5.15.121 to ≤ 5.15.*unaffected
  • 6.1.39 to ≤ 6.1.*unaffected
  • 6.3.13 to ≤ 6.3.*unaffected
  • 6.4.4 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References