Memory Leak in Mediatek Clock Driver of Linux Kernel

CVE-2023-53424

What is CVE-2023-53424?

A memory leak vulnerability has been discovered in the Mediatek clock driver within the Linux kernel, specifically in the mtk_clk_simple_probe() function. If an error occurs and clk_data is not available, the memory allocated through of_iomap() is not correctly released, leading to potential memory exhaustion. The issue has been identified and addressed by integrating a fix to ensure that the allocated memory is appropriately freed, thereby preventing undesired memory leaks. Users are urged to ensure they are using the latest kernel versions with the necessary patches applied to protect their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References