CVE-2023-54097
published 2025-12-24CVE-2023-54097: In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulator/stm32-pwr.c:166…
PriorityP421low5.5
EPSS
0.19%
8.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
regulator: stm32-pwr: fix of_iomap leak
Smatch reports:
drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn:
'base' from of_iomap() not released on lines: 151,166.
In stm32_pwr_regulator_probe(), base is not released
when devm_kzalloc() fails to allocate memory or
devm_regulator_register() fails to register a new regulator device,
which may cause a leak.
To fix this issue, replace of_iomap() with
devm_platform_ioremap_resource(). devm_platform_ioremap_resource()
is a specialized function for platform devices.
It allows 'base' to be automatically released whether the probe
function succeeds or fails.
Besides, use IS_ERR(base) instead of !base
as the return value of devm_platform_ioremap_resource()
can either be a pointer to the remapped memory or
an ERR_PTR() encoded error code if the operation fails.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= dc62f951a6a8490bcccc7b6de36cd85bd57be740 < 824683dbec234a01bd49a0589ee3323594a6f4cf | 824683dbec234a01bd49a0589ee3323594a6f4cf |
| linux | linux | >= dc62f951a6a8490bcccc7b6de36cd85bd57be740 < dfce9bb3517a78507cf96f9b83948d0b81338afa | dfce9bb3517a78507cf96f9b83948d0b81338afa |
| linux | linux | >= dc62f951a6a8490bcccc7b6de36cd85bd57be740 < ad6481f49fb2c703efa3a929643934f24b666d6a | ad6481f49fb2c703efa3a929643934f24b666d6a |
| linux | linux | >= dc62f951a6a8490bcccc7b6de36cd85bd57be740 < f25994f7a9ad53eb756bc4869497c3ebe281ad5e | f25994f7a9ad53eb756bc4869497c3ebe281ad5e |
| linux | linux | >= dc62f951a6a8490bcccc7b6de36cd85bd57be740 < c091bb49b3233307c7af73dae888f0799752af3d | c091bb49b3233307c7af73dae888f0799752af3d |
| linux | linux | >= dc62f951a6a8490bcccc7b6de36cd85bd57be740 < 0ad07e02be0d3f0d554653382ffe53ae4879378d | 0ad07e02be0d3f0d554653382ffe53ae4879378d |
| linux | linux | >= dc62f951a6a8490bcccc7b6de36cd85bd57be740 < c4a413e56d16a2ae84e6d8992f215c4dcc7fac20 | c4a413e56d16a2ae84e6d8992f215c4dcc7fac20 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 5.11.0 < 5.15.111 | 5.15.111 |
| linux | linux_kernel | >= 5.16.0 < 6.1.28 | 6.1.28 |
| linux | linux_kernel | >= 5.2.0 < 5.4.243 | 5.4.243 |
| linux | linux_kernel | >= 5.5.0 < 5.10.180 | 5.10.180 |
| linux | linux_kernel | >= 6.2.0 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3.0 < 6.3.2 | 6.3.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
regulator: stm32-pwr: fix of_iomap leak
osv·2025-12-24
CVE-2023-54097 regulator: stm32-pwr: fix of_iomap leak
regulator: stm32-pwr: fix of_iomap leak
In the Linux kernel, the following vulnerability has been resolved:
regulator: stm32-pwr: fix of_iomap leak
Smatch reports:
drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn:
'base' from of_iomap() not released on lines: 151,166.
In stm32_pwr_regulator_probe(), base is not released
when devm_kzalloc() fails to allocate memory or
devm_regulator_register() fails to register a new regulator device,
which may cause a leak.
To fix this issue, replace of_iomap() with
devm_platform_ioremap_resource(). devm_platform_ioremap_resource()
is a specialized function for platform devices.
It allows 'base' to be automatically released whether the probe
function succeeds or fails.
Besides, use IS_ERR(base) instead of !base
as the return value o
GHSA
GHSA-qhvp-r58q-c426: In the Linux kernel, the following vulnerability has been resolved:
regulator: stm32-pwr: fix of_iomap leak
Smatch reports:
drivers/regulator/stm32-
ghsa_unreviewed·2025-12-24
CVE-2023-54097 GHSA-qhvp-r58q-c426: In the Linux kernel, the following vulnerability has been resolved:
regulator: stm32-pwr: fix of_iomap leak
Smatch reports:
drivers/regulator/stm32-
In the Linux kernel, the following vulnerability has been resolved:
regulator: stm32-pwr: fix of_iomap leak
Smatch reports:
drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn:
'base' from of_iomap() not released on lines: 151,166.
In stm32_pwr_regulator_probe(), base is not released
when devm_kzalloc() fails to allocate memory or
devm_regulator_register() fails to register a new regulator device,
which may cause a leak.
To fix this issue, replace of_iomap() with
devm_platform_ioremap_resource(). devm_platform_ioremap_resource()
is a specialized function for platform devices.
It allows 'base' to be automatically released whether the probe
function succeeds or fails.
Besides, use IS_ERR(base) instead of !base
as the return value of devm_platform_ioremap_resource()
can ei
OSV
CVE-2023-54097: In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulator/stm32-pw
osv·2025-12-24
CVE-2023-54097 CVE-2023-54097: In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulator/stm32-pw
In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn: 'base' from of_iomap() not released on lines: 151,166. In stm32_pwr_regulator_probe(), base is not released when devm_kzalloc() fails to allocate memory or devm_regulator_register() fails to register a new regulator device, which may cause a leak. To fix this issue, replace of_iomap() with devm_platform_ioremap_resource(). devm_platform_ioremap_resource() is a specialized function for platform devices. It allows 'base' to be automatically released whether the probe function succeeds or fails. Besides, use IS_ERR(base) instead of !base as the return value of devm_platform_ioremap_resource() can either
Red Hat
kernel: Linux kernel: Memory leak in stm32-pwr regulator driver can lead to denial of service
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2023-54097 [LOW] CWE-772 kernel: Linux kernel: Memory leak in stm32-pwr regulator driver can lead to denial of service
kernel: Linux kernel: Memory leak in stm32-pwr regulator driver can lead to denial of service
In the Linux kernel, the following vulnerability has been resolved:
regulator: stm32-pwr: fix of_iomap leak
Smatch reports:
drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn:
'base' from of_iomap() not released on lines: 151,166.
In stm32_pwr_regulator_probe(), base is not released
when devm_kzalloc() fails to allocate memory or
devm_regulator_register() fails to register a new regulator device,
which may cause a leak.
To fix this issue, replace of_iomap() with
devm_platform_ioremap_resource(). devm_platform_ioremap_resource()
is a specialized function for platform devices.
It allows 'base' to be automatically released whether the probe
function succeeds or fails.
Besides, use IS
Debian
CVE-2023-54097: linux - In the Linux kernel, the following vulnerability has been resolved: regulator: ...
vendor_debian·2023
CVE-2023-54097 CVE-2023-54097: linux - In the Linux kernel, the following vulnerability has been resolved: regulator: ...
In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn: 'base' from of_iomap() not released on lines: 151,166. In stm32_pwr_regulator_probe(), base is not released when devm_kzalloc() fails to allocate memory or devm_regulator_register() fails to register a new regulator device, which may cause a leak. To fix this issue, replace of_iomap() with devm_platform_ioremap_resource(). devm_platform_ioremap_resource() is a specialized function for platform devices. It allows 'base' to be automatically released whether the probe function succeeds or fails. Besides, use IS_ERR(base) instead of !base as the return value of devm_platform_ioremap_resource() can either
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54097 kernel: Linux kernel: Memory leak in stm32-pwr regulator driver can lead to denial of service
bugzilla·2025-12-24
CVE-2023-54097 [LOW] CVE-2023-54097 kernel: Linux kernel: Memory leak in stm32-pwr regulator driver can lead to denial of service
CVE-2023-54097 kernel: Linux kernel: Memory leak in stm32-pwr regulator driver can lead to denial of service
In the Linux kernel, the following vulnerability has been resolved:
regulator: stm32-pwr: fix of_iomap leak
Smatch reports:
drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn:
'base' from of_iomap() not released on lines: 151,166.
In stm32_pwr_regulator_probe(), base is not released
when devm_kzalloc() fails to allocate memory or
devm_regulator_register() fails to register a new regulator device,
which may cause a leak.
To fix this issue, replace of_iomap() with
devm_platform_ioremap_resource(). devm_platform_ioremap_resource()
is a specialized function for platform devices.
It allows 'base' to be automatically released whether the probe
function succeeds or fai
Wiz
CVE-2023-54097 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54097 CVE-2023-54097 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54097 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
regulator: stm32-pwr: fix of_iomap leak
Smatch reports:
drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn:
'base' from of_iomap() not released on lines: 151,166.
In stm32_pwr_regulator_probe(), base is not released
when devm_kzalloc() fails to allocate memory or
devm_regulator_register() fails to register a new regulator device,
which may cause a leak.
To fix this issue, replace of_iomap() with
devm_platform_ioremap_resource(). devm_platform_ioremap_resource()
is a specialized function for platform devices.
It allows 'base' to be automatically released whether the probe
function succeeds or fails.
Besides, use IS_ERR(base) instea
https://git.kernel.org/stable/c/0ad07e02be0d3f0d554653382ffe53ae4879378dhttps://git.kernel.org/stable/c/824683dbec234a01bd49a0589ee3323594a6f4cfhttps://git.kernel.org/stable/c/ad6481f49fb2c703efa3a929643934f24b666d6ahttps://git.kernel.org/stable/c/c091bb49b3233307c7af73dae888f0799752af3dhttps://git.kernel.org/stable/c/c4a413e56d16a2ae84e6d8992f215c4dcc7fac20https://git.kernel.org/stable/c/dfce9bb3517a78507cf96f9b83948d0b81338afahttps://git.kernel.org/stable/c/f25994f7a9ad53eb756bc4869497c3ebe281ad5e
2025-12-24
Published