{"cve":"CVE-2023-53704","nvd":{"published":"2025-10-22T14:15:44.977","modified":"2026-10-28T19:10:00.193","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nclk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()\n\nReplace of_iomap() and kzalloc() with devm_of_iomap() and devm_kzalloc()\nwhich can automatically release the related memory when the device\nor driver is removed or unloaded to avoid potential memory leak.\n\nIn this case, iounmap(anatop_base) in line 427,433 are removed\nas manual release is not required.\n\nBesides, referring to clk-imx8mq.c, check the return code of\nof_clk_add_hw_provider, if it returns negtive, print error info\nand unregister hws, which makes the program more robust.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/5bcf140e9e6cf76f1f1bd1f489a14ca4d49f9a1a","https://git.kernel.org/stable/c/6317d0302655f7e854cd4f31e93b47d35cb058bb","https://git.kernel.org/stable/c/878b02d5f3b56cb090dbe2c70c89273be144087f","https://git.kernel.org/stable/c/92ce7629a11ae62292e1cfaa6132dab081fc80ee","https://git.kernel.org/stable/c/bcea444ab4c045864b55d67313833d606676602a"],"products":[],"source":"nvd","synced_at":"2026-10-28T19:37:43.506563291+00:00"},"epss":{"cve":"CVE-2023-53704","score":0.0022,"percentile":0.12486,"date":"2026-10-28"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}