What’s Vulnerable › Vulnerabilities

CVE-2023-53264: clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-16 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe Use devm_of_iomap() instead of of_iomap() to automatically handle the unused ioremap region. If any error occurs, regions allocated by kzalloc() will leak, but using devm_kzalloc() instead will automatically free the memory using devm_kfree(). Also, fix error handling of hws by adding unregister_hws label, which unregisters remaining hws when iomap failed.

Affected products

• Linux kernel: from 5.18 before 6.1.39; from 6.2 before 6.3.13; from 6.4 before 6.4.4 — fixed in 6.1.39, 6.3.13, 6.4.4

How to fix

Upgrade to a fixed version: Linux kernel 6.1.39, 6.3.13, 6.4.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/02e54db221bb001b32f839e0149ee8d890ab9aa1
• https://git.kernel.org/stable/c/0fbdfd2542252e4c02e8158a06b7c0c9cfd40f99
• https://git.kernel.org/stable/c/1839032251a66f2ae5a043c495532830a55d28c4
• https://git.kernel.org/stable/c/1b280598ab3bd8a2dc8b96a12530d5b1ee7a8f4a

Get alerted when CVE-2023-53264 or the next vulnerability affects your stack