Memory Leak Vulnerability in Linux Kernel Affecting Devices

CVE-2023-53674

What is CVE-2023-53674?

A memory leak was identified in the Linux kernel due to a failure in properly registering the devres resource allocated by devm_clk_notifier_register(). This issue arises when the clk notifier is not unregistered upon device detachment, leading to unfreed resources. The problem was discovered through kmemleak analysis on Chromebook devices. Proper resource management measures are essential to prevent such leaks, and a fix has been implemented to ensure the notifier's registration through devres_add().

References