Linux Kernel Vulnerability in Arizona MFD - Refcnt Leak Issue

CVE-2023-53443

What is CVE-2023-53443?

A vulnerability exists within the Linux kernel's Arizona MFD driver, specifically in the arizona_clk32k_enable() function. The issue arises from an incorrect implementation of the function which uses pm_runtime_get_sync(). This can lead to an unexpected increase in the reference count, even when an error occurs during the device's power management operation. To mitigate this, the function should be modified to utilize pm_runtime_resume_and_get(), which properly manages the reference count and prevents leaks. This change is crucial for maintaining system integrity and effective resource management.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References