CVE-2023-54175 Details
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path The xiic_xfer() function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currently one error path where the function exits directly, which leads to a leak of the runtime PM reference. Make sure that this error path also releases the runtime PM reference.
A vulnerability exists in the Linux kernel's I2C XIIC driver, specifically in the 'xiic_xfer()' function, which improperly manages runtime power management (PM) references. When the function is called, it acquires a PM reference, which should be released upon exit. However, there is an error path that bypasses the release, causing a PM reference leak. This issue has been addressed by ensuring that the reference is properly released, even when the function exits due to an error.
Users can apply the available patch in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/06e661a259978305c0015f6f33d14477a0cfbe8f | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/2d320d9de7d31c0eb279b3f8a02cf1af473a3737 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/6027d84c073e26cb1b32a90d69c5fbad57776406 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/688fdfc458bfa651dca39c736d39c1b7520af0e8 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/72cb227a368cf286efb8ce1e741e8c7085747b4d | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/d663d93bb47e7ab45602b227701022d8aa16040a | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 30, 2025 | New CVE Received | kernel.org |