CVE-2023-53424

Source
https://cve.org/CVERecord?id=CVE-2023-53424
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53424.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-53424
Downstream
Related
Published
2025-09-18T16:04:06.635Z
Modified
2026-06-18T03:55:57.711129092Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
clk: mediatek: fix of_iomap memory leak
Details

In the Linux kernel, the following vulnerability has been resolved:

clk: mediatek: fix of_iomap memory leak

Smatch reports: drivers/clk/mediatek/clk-mtk.c:583 mtkclksimpleprobe() warn: 'base' from ofiomap() not released on lines: 496.

This problem was also found in linux-next. In mtkclksimpleprobe(), base is not released when handling errors if clkdata is not existed, which may cause a leak. So free_base should be added here to release base.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53424.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c58cd0e40ffac67961b945793876b973728f9b80
Fixed
847d5dd788ce05f0aaaa36ea174f7f0b9cf86f7d
Fixed
2cae6a28d8c12c597e8656962271520434c61c48
Fixed
47234e19b00816a8a7b278c7173f6d4e928c43c7
Fixed
3db7285e044144fd88a356f5b641b9cd4b231a77

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53424.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.15.0
Fixed
6.1.164
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.3.13
Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.4.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53424.json"