CVE-2023-54228 Details
Description
In the Linux kernel, the following vulnerability has been resolved: regulator: raa215300: Fix resource leak in case of error The clk_register_clkdev() allocates memory by calling vclkdev_alloc() and this memory is not freed in the error path. Similarly, resources allocated by clk_register_fixed_rate() are not freed in the error path. Fix these issues by using devm_clk_hw_register_fixed_rate() and devm_clk_hw_register_clkdev(). After this, the static variable clk is not needed. Replace it with local variable hw in probe() and drop calling clk_unregister_fixed_rate() from raa215300_rtc_unregister_device().
A resource leak vulnerability has been identified in the Linux kernel's RAA215300 regulator driver. When the function clk_register_clkdev() is called, it allocates memory that is not properly freed in case of an error. This issue is also present with resources allocated by clk_register_fixed_rate(), which are not released during error handling. The vulnerability affects the Linux kernel stable tree.
The vulnerability has been addressed by modifying the driver to use managed clock registration functions that automatically handle resource cleanup. The updated driver can be found in the latest Linux kernel stable releases.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2bf2d2ac9e67184dc99275875a6452ca6e3027ff | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e21ac64e669e960688e79bf5babeed63132dac8a | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Renesas RAA215300 | All versions |
CPE
Remediation
| |
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 30, 2025 | New CVE Received | kernel.org |