Memory Leak Vulnerability in Linux Kernel hwmon Driver Affecting Xgene Products

CVE-2023-53682

What is CVE-2023-53682?

A memory leak vulnerability has been identified in the hwmon driver of the Linux kernel, specifically affecting Xgene products. The issue arises from improper handling of memory mapping functions within the xgene_hwmon_probe function. The driver does not correctly release memory allocated via ioremap() and memremap(), leading to potential resource leakage. Developers have resolved this by updating the driver to utilize devm_ioremap and devm_memremap, ensuring that memory is appropriately managed and alleviating the risk of leaks that could impact system performance.

References