CVE-2023-54097regulator: stm32-pwr: fix of_iomap leak
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix of_iomap leak Smatch reports: drivers/regulator/stm32-pwr.c:166 stm32_pwr_regulator_probe() warn: 'base' from of_iomap() not released on lines: 151,166. In stm32_pwr_regulator_probe(), base is not released when devm_kzalloc() fails to allocate memory or devm_regulator_register() fails to register a new regulator device, which may cause a leak. To fix this issue, replace of_iomap() with devm_platform_ioremap_resource(). devm_platform_ioremap_resource() is a specialized function for platform devices. It allows 'base' to be automatically released whether the probe function succeeds or fails. Besides, use IS_ERR(base) instead of !base as the return value of devm_platform_ioremap_resource() can either be a pointer to the remapped memory or an ERR_PTR() encoded error code if the operation fails.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from dc62f951a6a8490bcccc7b6de36cd85bd57be740 before 824683dbec234a01bd49a0589ee3323594a6f4cf; from dc62f951a6a8490bcccc7b6de36cd85bd57be740 before dfce9bb3517a78507cf96f9b83948d0b81338afa; from dc62f951a6a8490bcccc7b6de36cd85bd57be740 before ad6481f49fb2c703efa3a929643934f24b666d6a; from dc62f951a6a8490bcccc7b6de36cd85bd57be740 before f25994f7a9ad53eb756bc4869497c3ebe281ad5e; from dc62f951a6a8490bcccc7b6de36cd85bd57be740 before c091bb49b3233307c7af73dae888f0799752af3d; from dc62f951a6a8490bcccc7b6de36cd85bd57be740 before 0ad07e02be0d3f0d554653382ffe53ae4879378d; from dc62f951a6a8490bcccc7b6de36cd85bd57be740 before c4a413e56d16a2ae84e6d8992f215c4dcc7fac20 | CNA record |
References
- https://git.kernel.org/stable/c/824683dbec234a01bd49a0589ee3323594a6f4cf
- https://git.kernel.org/stable/c/dfce9bb3517a78507cf96f9b83948d0b81338afa
- https://git.kernel.org/stable/c/ad6481f49fb2c703efa3a929643934f24b666d6a
- https://git.kernel.org/stable/c/f25994f7a9ad53eb756bc4869497c3ebe281ad5e
- https://git.kernel.org/stable/c/c091bb49b3233307c7af73dae888f0799752af3d
- https://git.kernel.org/stable/c/0ad07e02be0d3f0d554653382ffe53ae4879378d
- https://git.kernel.org/stable/c/c4a413e56d16a2ae84e6d8992f215c4dcc7fac20
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.