CVE-2023-53704
Description
In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() Replace of_iomap() and kzalloc() with devm_of_iomap() and devm_kzalloc() which can automatically release the related memory when the device or driver is removed or unloaded to avoid potential memory leak. In this case, iounmap(anatop_base) in line 427,433 are removed as manual release is not required. Besides, referring to clk-imx8mq.c, check the return code of of_clk_add_hw_provider, if it returns negtive, print error info and unregister hws, which makes the program more robust.
How to fix
- Linux Linuxcb047c13bbf9018693ae31f03a5a26b212d02f13, bcea444ab4c045864b55d67313833d606676602a, 6317d0302655f7e854cd4f31e93b47d35cb058bb, 5bcf140e9e6cf76f1f1bd1f489a14ca4d49f9a1a, 92ce7629a11ae62292e1cfaa6132dab081fc80ee, 878b02d5f3b56cb090dbe2c70c89273be144087f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 ≤ v < cb047c13bbf9018693ae31f03a5a26b212d02f13, 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 ≤ v < bcea444ab4c045864b55d67313833d606676602a, 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 ≤ v < 6317d0302655f7e854cd4f31e93b47d35cb058bb, 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 ≤ v < 5bcf140e9e6cf76f1f1bd1f489a14ca4d49f9a1a, 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 ≤ v < 92ce7629a11ae62292e1cfaa6132dab081fc80ee, 9c140d9926761b0f5d329ff6c09a1540f3d5e1d3 ≤ v < 878b02d5f3b56cb090dbe2c70c89273be144087f, 5.6 | cb047c13bbf9018693ae31f03a5a26b212d02f13, bcea444ab4c045864b55d67313833d606676602a, 6317d0302655f7e854cd4f31e93b47d35cb058bb, 5bcf140e9e6cf76f1f1bd1f489a14ca4d49f9a1a, 92ce7629a11ae62292e1cfaa6132dab081fc80ee, 878b02d5f3b56cb090dbe2c70c89273be144087f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.