In the Linux kernel, the following vulnerability has been resolved:
clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
Replace of_iomap() and kzalloc() with devm_of_iomap() and devm_kzalloc() which can automatically release the related memory when the device or driver is removed or unloaded to avoid potential memory leak.
In this case, iounmap(anatop_base) in line 427,433 are removed as manual release is not required.
Besides, referring to clk-imx8mq.c, check the return code of of_clk_add_hw_provider, if it returns negtive, print error info and unregister hws, which makes the program more robust.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 24, 2025 | Oct 24, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 22, 2025 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-lowlatencyUpgrade linux-nvidia-tegra-igxUpgrade linux-aws-5.15Upgrade linux-nvidia-tegraUpgrade linux-bluefieldUpgrade linux-nvidia-tegra-5.15Upgrade linux-riscv-5.15Upgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linuxUpgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-ibmUpgrade linux-azureUpgrade linux-xilinx-zynqmpUpgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-azure-5.15Upgrade linux-hwe-5.15Upgrade linux-oracleUpgrade linux-raspiUpgrade linux-nvidia | Oct 28, 2025 | Oct 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub