CVE-2023-53682

A resource management flaw was found in the Linux kernel xgene hardware monitor driver in the way I/O memory mappings were handled. Missing release of ioremap/memremap regions in probe paths could leak mapped resources.

A local user could use this flaw to degrade system stability over time, resulting in a denial of service.

xgene_hwmon_probe() used raw ioremap() and memremap() and failed to release them on error paths, leading to resource leakage flagged by Smatch. The fix converts to the managed APIs (devm_ioremap/devm_memremap) so mappings are automatically freed with device lifetime.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module xgene-hwmon from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.