What’s Vulnerable › Vulnerabilities

CVE-2023-53682: hwmon: (xgene) Fix ioremap and memremap leak

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-07 · updated 2026-10-28
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (xgene) Fix ioremap and memremap leak Smatch reports: drivers/hwmon/xgene-hwmon.c:757 xgene_hwmon_probe() warn: 'ctx->pcc_comm_addr' from ioremap() not released on line: 757. This is because in drivers/hwmon/xgene-hwmon.c:701 xgene_hwmon_probe(), ioremap and memremap is not released, which may cause a leak. To fix this, ioremap and memremap is modified to devm_ioremap and devm_memremap. [groeck: Fixed formatting and subject]

Affected products

• Linux kernel: from 4.9 before 6.1.25; from 6.2 before 6.2.12; 6.3-rc1, 6.3-rc2, 6.3-rc3 — fixed in 6.1.25, 6.2.12

How to fix

Upgrade to a fixed version: Linux kernel 6.1.25, 6.2.12. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1773185a0a87006c1be78a978d9dd61aa7a33db8
• https://git.kernel.org/stable/c/813cc94c7847ae4a17e9f744fb4dbdf7df6bd732
• https://git.kernel.org/stable/c/9d482a09acd3d5f61a56aefc125d32c81994707b

Get alerted when CVE-2023-53682 or the next vulnerability affects your stack