CVE-2023-53674

devmclknotifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on device detach and the allocated resource was leaked.

Fix the issue by registering the resource through devres_add().

This issue was found with kmemleak on a Chromebook.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53674.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6d30d50d037dfa092f9d5d1fffa348ab4abb7163

Fixed

a326cf0107b197e649bbaa2a2b1355894826ce32

Fixed

49451db71b746df990888068961f1033f7c9b734

Fixed

cb1b04fd4283fc8f9acefe0ddc61ba072ed44877

Fixed

efbbda79b2881a04dcd0e8f28634933d79e17e49

Fixed

7fb933e56f77a57ef7cfc59fc34cbbf1b1fa31ff

Affected versions

v5.*

v5.10

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.15.1

v5.15.10

v5.15.100

v5.15.101

v5.15.102

v5.15.103

v5.15.104

v5.15.105

v5.15.106

v5.15.107

v5.15.108

v5.15.109

v5.15.11

v5.15.110

v5.15.111

v5.15.112

v5.15.113

v5.15.114

v5.15.115

v5.15.116

v5.15.117

v5.15.118

v5.15.119

v5.15.12

v5.15.120

v5.15.13

v5.15.14

v5.15.15

v5.15.16

v5.15.17

v5.15.18

v5.15.19

v5.15.2

v5.15.20

v5.15.21

v5.15.22

v5.15.23

v5.15.24

v5.15.25

v5.15.26

v5.15.27

v5.15.28

v5.15.29

v5.15.3

v5.15.30

v5.15.31

v5.15.32

v5.15.33

v5.15.34

v5.15.35

v5.15.36

v5.15.37

v5.15.38

v5.15.39

v5.15.4

v5.15.40

v5.15.41

v5.15.42

v5.15.43

v5.15.44

v5.15.45

v5.15.46

v5.15.47

v5.15.48

v5.15.49

v5.15.5

v5.15.50

v5.15.51

v5.15.52

v5.15.53

v5.15.54

v5.15.55

v5.15.56

v5.15.57

v5.15.58

v5.15.59

v5.15.6

v5.15.60

v5.15.61

v5.15.62

v5.15.63

v5.15.64

v5.15.65

v5.15.66

v5.15.67

v5.15.68

v5.15.69

v5.15.7

v5.15.70

v5.15.71

v5.15.72

v5.15.73

v5.15.74

v5.15.75

v5.15.76

v5.15.77

v5.15.78

v5.15.79

v5.15.8

v5.15.80

v5.15.81

v5.15.82

v5.15.83

v5.15.84

v5.15.85

v5.15.86

v5.15.87

v5.15.88

v5.15.89

v5.15.9

v5.15.90

v5.15.91

v5.15.92

v5.15.93

v5.15.94

v5.15.95

v5.15.96

v5.15.97

v5.15.98

v5.15.99

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.4

v6.1.5

v6.1.6

v6.1.7

v6.1.8

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.3.1

v6.3.10

v6.3.11

v6.3.12

v6.3.2

v6.3.3

v6.3.4

v6.3.5

v6.3.6

v6.3.7

v6.3.8

v6.3.9

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.4.1

v6.4.2

v6.4.3

Database specific

vanir_signatures

[
    {
        "digest": {
            "length": 343.0,
            "function_hash": "136734311984473790627284186676327685996"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@efbbda79b2881a04dcd0e8f28634933d79e17e49",
        "deprecated": false,
        "id": "CVE-2023-53674-0cccafbb",
        "signature_type": "Function",
        "target": {
            "function": "devm_clk_notifier_register",
            "file": "drivers/clk/clk.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "length": 343.0,
            "function_hash": "136734311984473790627284186676327685996"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fb933e56f77a57ef7cfc59fc34cbbf1b1fa31ff",
        "deprecated": false,
        "id": "CVE-2023-53674-0f37f55a",
        "signature_type": "Function",
        "target": {
            "function": "devm_clk_notifier_register",
            "file": "drivers/clk/clk.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "length": 343.0,
            "function_hash": "136734311984473790627284186676327685996"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb1b04fd4283fc8f9acefe0ddc61ba072ed44877",
        "deprecated": false,
        "id": "CVE-2023-53674-15c73681",
        "signature_type": "Function",
        "target": {
            "function": "devm_clk_notifier_register",
            "file": "drivers/clk/clk.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "length": 343.0,
            "function_hash": "136734311984473790627284186676327685996"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49451db71b746df990888068961f1033f7c9b734",
        "deprecated": false,
        "id": "CVE-2023-53674-3bfd8bc0",
        "signature_type": "Function",
        "target": {
            "function": "devm_clk_notifier_register",
            "file": "drivers/clk/clk.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "163756796846913535826918998818567645758",
                "21871091217667841671024313842986269152",
                "40657147632586412282510009860249501831",
                "78169778613717306549544221171342707184"
            ]
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@efbbda79b2881a04dcd0e8f28634933d79e17e49",
        "deprecated": false,
        "id": "CVE-2023-53674-52cdaf64",
        "signature_type": "Line",
        "target": {
            "file": "drivers/clk/clk.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "163756796846913535826918998818567645758",
                "21871091217667841671024313842986269152",
                "40657147632586412282510009860249501831",
                "78169778613717306549544221171342707184"
            ]
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fb933e56f77a57ef7cfc59fc34cbbf1b1fa31ff",
        "deprecated": false,
        "id": "CVE-2023-53674-6f0901ac",
        "signature_type": "Line",
        "target": {
            "file": "drivers/clk/clk.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "163756796846913535826918998818567645758",
                "21871091217667841671024313842986269152",
                "40657147632586412282510009860249501831",
                "78169778613717306549544221171342707184"
            ]
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb1b04fd4283fc8f9acefe0ddc61ba072ed44877",
        "deprecated": false,
        "id": "CVE-2023-53674-a292ae61",
        "signature_type": "Line",
        "target": {
            "file": "drivers/clk/clk.c"
        },
        "signature_version": "v1"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "163756796846913535826918998818567645758",
                "21871091217667841671024313842986269152",
                "40657147632586412282510009860249501831",
                "78169778613717306549544221171342707184"
            ]
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49451db71b746df990888068961f1033f7c9b734",
        "deprecated": false,
        "id": "CVE-2023-53674-b41a4bc7",
        "signature_type": "Line",
        "target": {
            "file": "drivers/clk/clk.c"
        },
        "signature_version": "v1"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53674.json"

Git / github.com/gregkh/linux