Memory Leak in Linux Kernel Clock Driver of NXP Products

CVE-2023-53249

What is CVE-2023-53249?

A vulnerability exists in the Linux kernel's clock driver for NXP's platform, specifically in the imx8mn_clocks_probe function. The issue arises due to improper handling of memory allocation where regions allocated using kzalloc() may leak if errors occur. The recommended fix suggests utilizing devm_of_iomap() instead of of_iomap() to effectively manage the ioremap region, avoiding memory leaks by leveraging devm_kzalloc() which automatically frees memory through devm_kfree(). This adjustment enhances memory management and stability in NXP's Linux kernel implementations.

References