CVE Database›CVE-2023-54221

CVE-2023-54221

kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · June 30, 2026

Description

A memory leak was found in the Linux kernel's i.MX93 clock driver. The imx93_clocks_probe() function returns directly without unregistering hardware clocks or freeing allocated memory when errors occur. The fix converts allocations to use device-managed APIs (devm_kzalloc, devm_of_iomap) and adds proper error handling goto paths.

Statement

This flaw affects only NXP i.MX93 SoC platforms and manifests during clock driver probe failures. The memory leak occurs only in error paths during driver initialization, not during normal operation. Given the limited platform scope and requirement for probe failures, the practical security impact is minimal.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-772 · Missing Release of Resource after Effective Lifetime