PT-2025-54050 · Linux · Linux Kernel

Published

2025-12-30

·

Updated

2026-03-24

·

CVE-2023-54221

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel related to memory management and resource handling within the imx93 clock driver. Specifically, the probe() function does not properly release hardware resources (hws) when an error occurs during initialization, leading to a memory leak. The issue arises from a direct return from the function without unregistering these resources. Additionally, the code lacks a proper unwind mechanism for error handling. The fix involves adding a 'goto unregister hws;' statement to ensure resource cleanup and utilizing devm kzalloc() and devm of iomap() for automatic memory and ioremap region management, respectively. The vulnerable function is probe().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54221
RHSA-2024:2394
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1

Affected Products

Linux Kernel