Back
CVE-2023-53249
clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
Medium5.5EPSS 0.15%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe Use devm_of_iomap() instead of of_iomap() to automatically handle the unused ioremap region. If any error occurs, regions allocated by kzalloc() will leak, but using devm_kzalloc() instead will automatically free the memory using devm_kfree().
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.15% · top 96% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b – < 294321349bd3b0680847fc2bbe66b9ab3e522fea
- affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b – < 50b5ddde8fad5f0ffd239029d0956af633a0f9b1
- affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b – < 9ba3693b0350b154fdd7830559bbc7b04c067096
- affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b – < 9428cf0fbf4be9a24f3e15a0c166b861b12666af
- affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b – < d4fa5e47af1e7bb2bbcaac062b14216c00e92148
- affected 96d6392b54dbb1ff2b39448a2516fa6abb33114b – < 188d070de9132667956f5aadd98d2bd87d3eac89
- affected 5.4
- unaffected < 5.4
- unaffected 5.10.188 – ≤ 5.10.*
- unaffected 5.15.121 – ≤ 5.15.*
- unaffected 6.1.39 – ≤ 6.1.*
- unaffected 6.3.13 – ≤ 6.3.*
- unaffected 6.4.4 – ≤ 6.4.*
- unaffected 6.5 – ≤ *
References (6)
- https://git.kernel.org/stable/c/294321349bd3b0680847fc2bbe66b9ab3e522fea (opens in a new tab)
- https://git.kernel.org/stable/c/50b5ddde8fad5f0ffd239029d0956af633a0f9b1 (opens in a new tab)
- https://git.kernel.org/stable/c/9ba3693b0350b154fdd7830559bbc7b04c067096 (opens in a new tab)
- https://git.kernel.org/stable/c/9428cf0fbf4be9a24f3e15a0c166b861b12666af (opens in a new tab)
- https://git.kernel.org/stable/c/d4fa5e47af1e7bb2bbcaac062b14216c00e92148 (opens in a new tab)
- https://git.kernel.org/stable/c/188d070de9132667956f5aadd98d2bd87d3eac89 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-53249)Record last updated .