Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2023-53704: Linux kernel on AWS/Azure may leak memory
CVE-2023-53704 · published 1 year ago
Summary
The Ubuntu Linux kernels used on AWS and Azure (versions 5.0, 5.3, 5.8 and the HWE edge release) had code that could leave memory allocated if the driver was removed. This could reduce system performance over time. Updating the kernel to the latest package releases fixes the issue automatically.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1047.52~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1049.56~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1044.52~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-86.96~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1040.43~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1043.49~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-86.95~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1018.18~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1045.51~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1043.47~20.04.1.
- Update canonical linux to version 5.15.0-86.96.
- Update canonical linux-aws to version 5.15.0-1047.52.
- Update canonical linux-azure to version 5.15.0-1049.56.
- Update canonical linux-gcp to version 5.15.0-1044.52.
- Update canonical linux-gke to version 5.15.0-1044.49.
- Update canonical linux-gkeop to version 5.15.0-1030.35.
- Update canonical linux-ibm to version 5.15.0-1040.43.
- Update canonical linux-intel-iotg to version 5.15.0-1043.49.
- Update canonical linux-kvm to version 5.15.0-1044.49.
- Update canonical linux-lowlatency to version 5.15.0-86.95.
- Update canonical linux-nvidia to version 5.15.0-1037.37.
- Update canonical linux-nvidia-tegra to version 5.15.0-1018.18.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1005.5.
- Update canonical linux-oracle to version 5.15.0-1045.51.
- Update canonical linux-raspi to version 5.15.0-1040.43.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
- Update canonical linux-bluefield to version 5.15.0-1027.29.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1040.42.
- Update canonical linux-realtime to version 5.15.0-1048.54.
- Update debian linux to version 6.1.52-1.
- Update debian linux to version 6.4.4-1.
- Update canonical linux-azure-fde to version 5.15.0-1049.56.1.
- Update linux kernel to version 6.4.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1047.52~20.04.1 Fix: upgrade to 5.15.0-1047.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1049.56~20.04.1 Fix: upgrade to 5.15.0-1049.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1044.52~20.04.1 Fix: upgrade to 5.15.0-1044.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-86.96~20.04.1 Fix: upgrade to 5.15.0-86.96~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1040.43~20.04.1 Fix: upgrade to 5.15.0-1040.43~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1043.49~20.04.1 Fix: upgrade to 5.15.0-1043.49~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-86.95~20.04.1 Fix: upgrade to 5.15.0-86.95~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1018.18~20.04.1 Fix: upgrade to 5.15.0-1018.18~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1045.51~20.04.1 Fix: upgrade to 5.15.0-1045.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1043.47~20.04.1 Fix: upgrade to 5.15.0-1043.47~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
Showing 50 of 122. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-86.96 Fix: upgrade to 5.15.0-86.96
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1047.52 Fix: upgrade to 5.15.0-1047.52
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1049.56 Fix: upgrade to 5.15.0-1049.56
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1049.56.1 Fix: upgrade to 5.15.0-1049.56.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1044.52 Fix: upgrade to 5.15.0-1044.52
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1044.49 Fix: upgrade to 5.15.0-1044.49
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1030.35 Fix: upgrade to 5.15.0-1030.35
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1040.43 Fix: upgrade to 5.15.0-1040.43
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1043.49 Fix: upgrade to 5.15.0-1043.49
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1044.49 Fix: upgrade to 5.15.0-1044.49
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-86.95 Fix: upgrade to 5.15.0-86.95
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1037.37 Fix: upgrade to 5.15.0-1037.37
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1018.18 Fix: upgrade to 5.15.0-1018.18
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1005.5 Fix: upgrade to 5.15.0-1005.5
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1045.51 Fix: upgrade to 5.15.0-1045.51
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1040.43 Fix: upgrade to 5.15.0-1040.43
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1025.29 Fix: upgrade to 5.15.0-1025.29
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1027.29 Fix: upgrade to 5.15.0-1027.29
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1040.42 Fix: upgrade to 5.15.0-1040.42
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1048.54 Fix: upgrade to 5.15.0-1048.54
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Debian:12 | debian | linux |
< 6.1.52-1 Fix: upgrade to 6.1.52-1
|
| Debian:13 | debian | linux |
< 6.4.4-1 Fix: upgrade to 6.4.4-1
|
| Debian:14 | debian | linux |
< 6.4.4-1 Fix: upgrade to 6.4.4-1
|
| Linux | linux | kernel |
>= 6.4.0, < 6.4.4 Fix: upgrade to 6.4.4
|
Original advisory text
clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() Replace of_iomap() and kzalloc() with devm_of_iomap() and devm_kzalloc() which can automatically release the related memory when the device or driver is removed or unloaded to avoid potential memory leak. In this case, iounmap(anatop_base) in line 427,433 are removed as manual release is not required. Besides, referring to clk-imx8mq.c, check the return code of of_clk_add_hw_provider, if it returns negtive, print error info and unregister hws, which makes the program more robust.
References
- https://git.kernel.org/stable/c/5bcf140e9e6cf76f1f1bd1f489a14ca4d49f9a1a Third Party Advisory
- https://git.kernel.org/stable/c/6317d0302655f7e854cd4f31e93b47d35cb058bb Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-53704 Vendor Advisory
- https://ubuntu.com/security/CVE-2023-53704 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-53704 Third Party Advisory
- https://git.kernel.org/stable/c/cb047c13bbf9018693ae31f03a5a26b212d02f13 Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53704... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53704 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/linus/878b02d5f3b56cb090dbe2c70c89273be144087f Third Party Advisory
- https://git.kernel.org/stable/c/878b02d5f3b56cb090dbe2c70c89273be144087f Third Party Advisory
- https://git.kernel.org/stable/c/92ce7629a11ae62292e1cfaa6132dab081fc80ee Third Party Advisory
- https://git.kernel.org/stable/c/bcea444ab4c045864b55d67313833d606676602a Third Party Advisory
Timeline
Published22 Oct 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2023-53704 · NVD
UBUNTU-CVE-2023-53704 · OSV
DEBIAN-CVE-2023-53704 · OSV
CVE-2023-53704 · OSV
Track software like this
Free during beta