CVE-2023-53592 Details
Description
In the Linux kernel, the following vulnerability has been resolved: gpio: sifive: Fix refcount leak in sifive_gpio_probe of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.
A refcount leak vulnerability has been identified in the SiFive GPIO driver for the Linux kernel. The issue arises in the 'sifive_gpio_probe' function, where 'of_irq_find_parent' returns a node pointer with an incremented reference count. The driver fails to release this reference when it's no longer needed, leading to a memory leak. This vulnerability affects the Linux kernel stable tree.
The vulnerability has been addressed in the Linux kernel by adding the missing 'of_node_put' call to properly manage the reference count. Users can upgrade to the latest version of the Linux kernel stable tree to apply this fix.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/694175cd8a1643cde3acb45c9294bca44a8e08e9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/95da1882ce9372ba20278f87cdb7a34f9812c4b5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9a402a210798662b04cbe6ca466e916a15efa03a | kernel.org | Patch |
| https://git.kernel.org/stable/c/f4a2ad1002006548e235255c65a4f1d07312be9d | kernel.org | Patch |
| https://git.kernel.org/stable/c/f9fb4776ebbc16dfc512adbdc0fe218acb47c7cc | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.6, < 5.10.163 >= 5.11, < 5.15.87 >= 5.16, < 6.0.19 >= 6.1, < 6.1.5 6.2 rc1 6.2 rc2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Mar 21, 2026 | Modified Analysis | [email protected] |
| Feb 9, 2026 | Initial Analysis | [email protected] |
| Oct 4, 2025 | New CVE Received | kernel.org |