CVE-2023-54221
published 2025-12-30CVE-2023-54221: In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe In function…
PriorityP419low3.3
EPSS
0.17%
7.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In function probe(), it returns directly without unregistered hws
when error occurs.
Fix this by adding 'goto unregister_hws;' on line 295 and
line 310.
Use devm_kzalloc() instead of kzalloc() to automatically
free the memory using devm_kfree() when error occurs.
Replace of_iomap() with devm_of_iomap() to automatically
handle the unused ioremap region and delete 'iounmap(anatop_base);'
in unregister_hws.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 24defbe194b650218680fcd9dec8cd103537b531 < 280a5ff665e12d1e0c54c20cedc9c5008aa686a5 | 280a5ff665e12d1e0c54c20cedc9c5008aa686a5 |
| linux | linux | >= 24defbe194b650218680fcd9dec8cd103537b531 < fac9c624138c4bc021d7a8ee3b974c9e10926d92 | fac9c624138c4bc021d7a8ee3b974c9e10926d92 |
| linux | linux | >= 24defbe194b650218680fcd9dec8cd103537b531 < d17c16a2b2a6589c45b0bfb1b9914da80b72d89e | d17c16a2b2a6589c45b0bfb1b9914da80b72d89e |
| linux | linux | >= 24defbe194b650218680fcd9dec8cd103537b531 < e02ba11b457647050cb16e7cad16cec3c252fade | e02ba11b457647050cb16e7cad16cec3c252fade |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
| linux | linux_kernel | >= 5.18.0 < 6.1.39 | 6.1.39 |
| linux | linux_kernel | >= 6.2.0 < 6.3.13 | 6.3.13 |
| linux | linux_kernel | >= 6.4.0 < 6.4.4 | 6.4.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
vendor_redhat·2025-12-30·CVSS 3.3
CVE-2023-54221 [LOW] CWE-772 kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In the Linux kernel, the following vulnerability has been resolved:
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In function probe(), it returns directly without unregistered hws
when error occurs.
Fix this by adding 'goto unregister_hws;' on line 295 and
line 310.
Use devm_kzalloc() instead of kzalloc() to automatically
free the memory using devm_kfree() when error occurs.
Replace of_iomap() with devm_of_iomap() to automatically
handle the unused ioremap region and delete 'iounmap(anatop_base);'
in unregister_hws.
A memory leak was found in the Linux kernel's i.MX93 clock driver. The imx93_clocks_probe() function returns directly without unregistering hardware clocks or freeing
Debian
CVE-2023-54221: linux - In the Linux kernel, the following vulnerability has been resolved: clk: imx93:...
vendor_debian·2023
CVE-2023-54221 CVE-2023-54221: linux - In the Linux kernel, the following vulnerability has been resolved: clk: imx93:...
In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe In function probe(), it returns directly without unregistered hws when error occurs. Fix this by adding 'goto unregister_hws;' on line 295 and line 310. Use devm_kzalloc() instead of kzalloc() to automatically free the memory using devm_kfree() when error occurs. Replace of_iomap() with devm_of_iomap() to automatically handle the unused ioremap region and delete 'iounmap(anatop_base);' in unregister_hws.
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved
forky: resolved (fixed in 6.4.4-1)
sid: resolved (fixed in 6.4.4-1)
trixie: resolved (fixed in 6.4.4-1)
OSV
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
osv·2025-12-30
CVE-2023-54221 clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In the Linux kernel, the following vulnerability has been resolved:
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In function probe(), it returns directly without unregistered hws
when error occurs.
Fix this by adding 'goto unregister_hws;' on line 295 and
line 310.
Use devm_kzalloc() instead of kzalloc() to automatically
free the memory using devm_kfree() when error occurs.
Replace of_iomap() with devm_of_iomap() to automatically
handle the unused ioremap region and delete 'iounmap(anatop_base);'
in unregister_hws.
OSV
CVE-2023-54221: In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe In funct
osv·2025-12-30
CVE-2023-54221 CVE-2023-54221: In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe In funct
In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe In function probe(), it returns directly without unregistered hws when error occurs. Fix this by adding 'goto unregister_hws;' on line 295 and line 310. Use devm_kzalloc() instead of kzalloc() to automatically free the memory using devm_kfree() when error occurs. Replace of_iomap() with devm_of_iomap() to automatically handle the unused ioremap region and delete 'iounmap(anatop_base);' in unregister_hws.
GHSA
GHSA-c6v6-34rg-jgwv: In the Linux kernel, the following vulnerability has been resolved:
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In fun
ghsa_unreviewed·2025-12-30
CVE-2023-54221 GHSA-c6v6-34rg-jgwv: In the Linux kernel, the following vulnerability has been resolved:
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In fun
In the Linux kernel, the following vulnerability has been resolved:
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In function probe(), it returns directly without unregistered hws
when error occurs.
Fix this by adding 'goto unregister_hws;' on line 295 and
line 310.
Use devm_kzalloc() instead of kzalloc() to automatically
free the memory using devm_kfree() when error occurs.
Replace of_iomap() with devm_of_iomap() to automatically
handle the unused ioremap region and delete 'iounmap(anatop_base);'
in unregister_hws.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54221 kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
bugzilla·2025-12-30
CVE-2023-54221 [LOW] CVE-2023-54221 kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
CVE-2023-54221 kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In the Linux kernel, the following vulnerability has been resolved:
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In function probe(), it returns directly without unregistered hws
when error occurs.
Fix this by adding 'goto unregister_hws;' on line 295 and
line 310.
Use devm_kzalloc() instead of kzalloc() to automatically
free the memory using devm_kfree() when error occurs.
Replace of_iomap() with devm_of_iomap() to automatically
handle the unused ioremap region and delete 'iounmap(anatop_base);'
in unregister_hws.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123027-CVE-2023-54221-567b@gregkh/T
Wiz
CVE-2023-54221 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54221 CVE-2023-54221 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54221 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
In function probe(), it returns directly without unregistered hws
when error occurs.
Fix this by adding 'goto unregister_hws;' on line 295 and
line 310.
Use devm_kzalloc() instead of kzalloc() to automatically
free the memory using devm_kfree() when error occurs.
Replace of_iomap() with devm_of_iomap() to automatically
handle the unused ioremap region and delete 'iounmap(anatop_base);'
in unregister_hws.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Relea
2025-12-30
Published