CVE-2023-54097

Source
https://cve.org/CVERecord?id=CVE-2023-54097
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54097.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-54097
Downstream
Related
Published
2025-12-24T13:06:24.519Z
Modified
2026-03-20T12:33:26.772525Z
Summary
regulator: stm32-pwr: fix of_iomap leak
Details

In the Linux kernel, the following vulnerability has been resolved:

regulator: stm32-pwr: fix of_iomap leak

Smatch reports: drivers/regulator/stm32-pwr.c:166 stm32pwrregulatorprobe() warn: 'base' from ofiomap() not released on lines: 151,166.

In stm32pwrregulatorprobe(), base is not released when devmkzalloc() fails to allocate memory or devmregulatorregister() fails to register a new regulator device, which may cause a leak.

To fix this issue, replace ofiomap() with devmplatformioremapresource(). devmplatformioremap_resource() is a specialized function for platform devices. It allows 'base' to be automatically released whether the probe function succeeds or fails.

Besides, use ISERR(base) instead of !base as the return value of devmplatformioremapresource() can either be a pointer to the remapped memory or an ERR_PTR() encoded error code if the operation fails.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54097.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dc62f951a6a8490bcccc7b6de36cd85bd57be740
Fixed
824683dbec234a01bd49a0589ee3323594a6f4cf
Fixed
dfce9bb3517a78507cf96f9b83948d0b81338afa
Fixed
ad6481f49fb2c703efa3a929643934f24b666d6a
Fixed
f25994f7a9ad53eb756bc4869497c3ebe281ad5e
Fixed
c091bb49b3233307c7af73dae888f0799752af3d
Fixed
0ad07e02be0d3f0d554653382ffe53ae4879378d
Fixed
c4a413e56d16a2ae84e6d8992f215c4dcc7fac20

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54097.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.2.0
Fixed
5.4.243
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.180
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.111
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.28
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.15
Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.3.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54097.json"