GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-54221 (GCVE-0-2023-54221)

Vulnerability from cvelistv5 – Published: 2025-12-30 12:11 – Updated: 2026-05-11 19:57
VLAI
Title
clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe
Summary
In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe In function probe(), it returns directly without unregistered hws when error occurs. Fix this by adding 'goto unregister_hws;' on line 295 and line 310. Use devm_kzalloc() instead of kzalloc() to automatically free the memory using devm_kfree() when error occurs. Replace of_iomap() with devm_of_iomap() to automatically handle the unused ioremap region and delete 'iounmap(anatop_base);' in unregister_hws.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 24defbe194b650218680fcd9dec8cd103537b531 , < 280a5ff665e12d1e0c54c20cedc9c5008aa686a5 (git)
Affected: 24defbe194b650218680fcd9dec8cd103537b531 , < fac9c624138c4bc021d7a8ee3b974c9e10926d92 (git)
Affected: 24defbe194b650218680fcd9dec8cd103537b531 , < d17c16a2b2a6589c45b0bfb1b9914da80b72d89e (git)
Affected: 24defbe194b650218680fcd9dec8cd103537b531 , < e02ba11b457647050cb16e7cad16cec3c252fade (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.18
Unaffected: 0 , < 5.18 (semver)
Unaffected: 6.1.39 , ≤ 6.1.* (semver)
Unaffected: 6.3.13 , ≤ 6.3.* (semver)
Unaffected: 6.4.4 , ≤ 6.4.* (semver)
Unaffected: 6.5 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/clk/imx/clk-imx93.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "280a5ff665e12d1e0c54c20cedc9c5008aa686a5",
              "status": "affected",
              "version": "24defbe194b650218680fcd9dec8cd103537b531",
              "versionType": "git"
            },
            {
              "lessThan": "fac9c624138c4bc021d7a8ee3b974c9e10926d92",
              "status": "affected",
              "version": "24defbe194b650218680fcd9dec8cd103537b531",
              "versionType": "git"
            },
            {
              "lessThan": "d17c16a2b2a6589c45b0bfb1b9914da80b72d89e",
              "status": "affected",
              "version": "24defbe194b650218680fcd9dec8cd103537b531",
              "versionType": "git"
            },
            {
              "lessThan": "e02ba11b457647050cb16e7cad16cec3c252fade",
              "status": "affected",
              "version": "24defbe194b650218680fcd9dec8cd103537b531",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/clk/imx/clk-imx93.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.18"
            },
            {
              "lessThan": "5.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.39",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.39",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.13",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.4",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe\n\nIn function probe(), it returns directly without unregistered hws\nwhen error occurs.\n\nFix this by adding \u0027goto unregister_hws;\u0027 on line 295 and\nline 310.\n\nUse devm_kzalloc() instead of kzalloc() to automatically\nfree the memory using devm_kfree() when error occurs.\n\nReplace of_iomap() with devm_of_iomap() to automatically\nhandle the unused ioremap region and delete \u0027iounmap(anatop_base);\u0027\nin unregister_hws."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:57:47.547Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/280a5ff665e12d1e0c54c20cedc9c5008aa686a5"
        },
        {
          "url": "https://git.kernel.org/stable/c/fac9c624138c4bc021d7a8ee3b974c9e10926d92"
        },
        {
          "url": "https://git.kernel.org/stable/c/d17c16a2b2a6589c45b0bfb1b9914da80b72d89e"
        },
        {
          "url": "https://git.kernel.org/stable/c/e02ba11b457647050cb16e7cad16cec3c252fade"
        }
      ],
      "title": "clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-54221",
    "datePublished": "2025-12-30T12:11:16.053Z",
    "dateReserved": "2025-12-30T12:06:44.501Z",
    "dateUpdated": "2026-05-11T19:57:47.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-54221",
      "date": "2026-09-16",
      "epss": "0.00197",
      "percentile": "0.09633"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-54221\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-12-30T13:16:10.413\",\"lastModified\":\"2026-06-17T06:47:02.537\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nclk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe\\n\\nIn function probe(), it returns directly without unregistered hws\\nwhen error occurs.\\n\\nFix this by adding \u0027goto unregister_hws;\u0027 on line 295 and\\nline 310.\\n\\nUse devm_kzalloc() instead of kzalloc() to automatically\\nfree the memory using devm_kfree() when error occurs.\\n\\nReplace of_iomap() with devm_of_iomap() to automatically\\nhandle the unused ioremap region and delete \u0027iounmap(anatop_base);\u0027\\nin unregister_hws.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/clk/imx/clk-imx93.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"24defbe194b650218680fcd9dec8cd103537b531\",\"lessThan\":\"280a5ff665e12d1e0c54c20cedc9c5008aa686a5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"24defbe194b650218680fcd9dec8cd103537b531\",\"lessThan\":\"fac9c624138c4bc021d7a8ee3b974c9e10926d92\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"24defbe194b650218680fcd9dec8cd103537b531\",\"lessThan\":\"d17c16a2b2a6589c45b0bfb1b9914da80b72d89e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"24defbe194b650218680fcd9dec8cd103537b531\",\"lessThan\":\"e02ba11b457647050cb16e7cad16cec3c252fade\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/clk/imx/clk-imx93.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.18\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.18\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.39\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.3.13\",\"lessThanOrEqual\":\"6.3.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.4.4\",\"lessThanOrEqual\":\"6.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/280a5ff665e12d1e0c54c20cedc9c5008aa686a5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d17c16a2b2a6589c45b0bfb1b9914da80b72d89e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e02ba11b457647050cb16e7cad16cec3c252fade\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fac9c624138c4bc021d7a8ee3b974c9e10926d92\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-30T10:13:51+00:00",
      "cve": "CVE-2023-54221",
      "id": "CVE-2023-54221",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "279",
      "product_status:known_affected": "22",
      "product_status:known_not_affected": "166",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-54221.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-09-11T02:18:26Z",
      "cve": "CVE-2023-54221",
      "id": "CVE-2023-54221",
      "initial_release_date": "2025-12-31T00:28:10Z",
      "product_status:known_affected": "394",
      "product_status:known_not_affected": "457",
      "product_status:recommended": "241",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-54221",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-54221.json",
      "version": "35"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.