CVE-2023-54097

Source
https://cve.org/CVERecord?id=CVE-2023-54097
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54097.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-54097
Downstream
Related
Published
2025-12-24T13:06:24Z
Modified
2026-08-12T03:30:29Z
Summary
regulator: stm32-pwr: fix of_iomap leak
Details

In the Linux kernel, the following vulnerability has been resolved:

regulator: stm32-pwr: fix of_iomap leak

Smatch reports: drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn: 'base' from of_iomap() not released on lines: 151,166.

In stm32_pwr_regulator_probe(), base is not released when devm_kzalloc() fails to allocate memory or devm_regulator_register() fails to register a new regulator device, which may cause a leak.

To fix this issue, replace of_iomap() with devm_platform_ioremap_resource(). devm_platform_ioremap_resource() is a specialized function for platform devices. It allows 'base' to be automatically released whether the probe function succeeds or fails.

Besides, use IS_ERR(base) instead of !base as the return value of devm_platform_ioremap_resource() can either be a pointer to the remapped memory or an ERR_PTR() encoded error code if the operation fails.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54097.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dc62f951a6a8490bcccc7b6de36cd85bd57be740
Fixed
824683dbec234a01bd49a0589ee3323594a6f4cf
Fixed
dfce9bb3517a78507cf96f9b83948d0b81338afa
Fixed
ad6481f49fb2c703efa3a929643934f24b666d6a
Fixed
f25994f7a9ad53eb756bc4869497c3ebe281ad5e
Fixed
c091bb49b3233307c7af73dae888f0799752af3d
Fixed
0ad07e02be0d3f0d554653382ffe53ae4879378d
Fixed
c4a413e56d16a2ae84e6d8992f215c4dcc7fac20

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54097.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.2.0
Fixed
5.4.243
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.180
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.111
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.28
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.15
Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.3.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54097.json"