CVE-2023-54221

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe

In function probe(), it returns directly without unregistered hws when error occurs.

Fix this by adding ‘goto unregister_hws;’ on line 295 and line 310.

Use devm_kzalloc() instead of kzalloc() to automatically free the memory using devm_kfree() when error occurs.

Replace of_iomap() with devm_of_iomap() to automatically handle the unused ioremap region and delete ‘iounmap(anatop_base);’ in unregister_hws.

Affected product:

AlmaLinux 9.2 ESU , TuxCare 9.6 ESU

Affected packages:

kernel @ 5.14.0 (+1 more)

In the Linux kernel, the following vulnerability has been resolved:

clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe

In function probe(), it returns directly without unregistered hws when error occurs.

Fix this by adding ‘goto unregister_hws;’ on line 295 and line 310.

Use devm_kzalloc() instead of kzalloc() to automatically free the memory using devm_kfree() when error occurs.

Replace of_iomap() with devm_of_iomap() to automatically handle the unused ioremap region and delete ‘iounmap(anatop_base);’ in unregister_hws.