CVE-2023-53704 clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
A memory leak in the i.MX8MP clock driver could lead to resource exhaustion and denial of service, requiring a kernel patch.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53704?
CVE-2023-53704 is a memory corruption vulnerability in Linux, published on 22 Oct 2025.
Official description
In the Linux kernel, the following vulnerability has been resolved:
clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
Replace of_iomap() and kzalloc() with devm_of_iomap() and devm_kzalloc() which can automatically release the related memory when the device or driver is removed or unloaded to avoid potential memory leak.
In this case, iounmap(anatop_base) in line 427,433 are removed as manual release is not required.
Besides, referring to clk-imx8mq.c, check the return code of of_clk_add_hw_provider, if it returns negtive, print error info and unregister hws, which makes the program more robust.
Which versions are affected by CVE-2023-53704?
How do I fix CVE-2023-53704?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-53704 being exploited?
There is no known exploitation of CVE-2023-53704 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-53704, DEBIAN-CVE-2023-53704, GHSA-mqpx-xr9g-rvhm, UBUNTU-CVE-2023-53704.