PT-2025-54136 · Linux+1 · Linux Kernel+1

Published 2023-01-01 · Updated 2025-12-30 · CVE-2023-54290

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a resource leak in the mtk thermal probe() function within the thermal/drivers/mediatek driver. The issue arises from failing to release iomap resources when errors occur. Specifically, the apmixed base and auxadc base resources obtained through of iomap() are not released, leading to a resource leak. The fix involves switching to devm of iomap to manage the iomap resources automatically.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-54290

Affected Products

Linux Kernel

Mtk Thermal Probe

References · 10

• https://security-tracker.debian.org/tracker/CVE-2023-54290 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54290 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54290 · Vendor Advisory
• https://git.kernel.org/stable/c/67b5051ad1dfd9d72efca235f740d7e4a34183f0 · Note
• https://git.kernel.org/stable/c/388d2578c7d7165c1aeca76a0b5ae38e6d74b176 · Note
• https://twitter.com/CVEnew/status/2005993803656884705 · Twitter Post
• https://git.kernel.org/stable/c/f05c7b7d9ea9477fcc388476c6f4ade8c66d2d26 · Note
• https://git.kernel.org/stable/c/b3b3f66bd47cb6fcee710bb24bdffbf5e7c727c2 · Note
• https://git.kernel.org/stable/c/e83b320b9e914ddf51fdf2374034113b872a49d7 · Note
• https://git.kernel.org/stable/c/15da2acad5156937c5b62444b18c6c20dd20f64d · Note