CVE-2023-53249

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53249
In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe Use devm_of_iomap() instead of of_iomap() to automatically handle the unused ioremap region. If any error occurs, regions allocated by kzalloc() will leak, but using devm_kzalloc() instead will automatically free the memory using devm_kfree().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/188d070de9132667956f5aadd98d2bd87d3eac89 Patch
https://git.kernel.org/stable/c/294321349bd3b0680847fc2bbe66b9ab3e522fea Patch
https://git.kernel.org/stable/c/50b5ddde8fad5f0ffd239029d0956af633a0f9b1 Patch
https://git.kernel.org/stable/c/9428cf0fbf4be9a24f3e15a0c166b861b12666af Patch
https://git.kernel.org/stable/c/9ba3693b0350b154fdd7830559bbc7b04c067096 Patch
https://git.kernel.org/stable/c/d4fa5e47af1e7bb2bbcaac062b14216c00e92148 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Dec 2025, 19:43

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/188d070de9132667956f5aadd98d2bd87d3eac89 - () https://git.kernel.org/stable/c/188d070de9132667956f5aadd98d2bd87d3eac89 - Patch
References () https://git.kernel.org/stable/c/294321349bd3b0680847fc2bbe66b9ab3e522fea - () https://git.kernel.org/stable/c/294321349bd3b0680847fc2bbe66b9ab3e522fea - Patch
References () https://git.kernel.org/stable/c/50b5ddde8fad5f0ffd239029d0956af633a0f9b1 - () https://git.kernel.org/stable/c/50b5ddde8fad5f0ffd239029d0956af633a0f9b1 - Patch
References () https://git.kernel.org/stable/c/9428cf0fbf4be9a24f3e15a0c166b861b12666af - () https://git.kernel.org/stable/c/9428cf0fbf4be9a24f3e15a0c166b861b12666af - Patch
References () https://git.kernel.org/stable/c/9ba3693b0350b154fdd7830559bbc7b04c067096 - () https://git.kernel.org/stable/c/9ba3693b0350b154fdd7830559bbc7b04c067096 - Patch
References () https://git.kernel.org/stable/c/d4fa5e47af1e7bb2bbcaac062b14216c00e92148 - () https://git.kernel.org/stable/c/d4fa5e47af1e7bb2bbcaac062b14216c00e92148 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-401
Information

Published : 2025-09-15 15:15

Updated : 2025-12-03 19:43

NVD link : CVE-2023-53249

Mitre link : CVE-2023-53249

CVE.ORG link : CVE-2023-53249

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime