CVE-2023-53592

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: sifive: Fix refcount leak in sifive_gpio_probe

of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 96868dce644d002383f6d5eb575a6ce3c8779f39, < f4a2ad1002006548e235255c65a4f1d07312be9d; >= 96868dce644d002383f6d5eb575a6ce3c8779f39, < 95da1882ce9372ba20278f87cdb7a34f9812c4b5; >= 96868dce644d002383f6d5eb575a6ce3c8779f39, < f9fb4776ebbc16dfc512adbdc0fe218acb47c7cc; >= 96868dce644d002383f6d5eb575a6ce3c8779f39, < 9a402a210798662b04cbe6ca466e916a15efa03a; >= 96868dce644d002383f6d5eb575a6ce3c8779f39, < 694175cd8a1643cde3acb45c9294bca44a8e08e9
LinuxLinux5.6

References

Timeline

Published
Oct 4, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-535935.5In the Linux kernel, the following vulnerability has been resolved: cifs: Release folio lock on fscache read hit. Under the current code, CVE-2023-535945.5In the Linux kernel, the following vulnerability has been resolved: driver core: fix resource leak in device_add() When calling kobject_adCVE-2023-535955.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: mcs: Fix NULL pointer dereferences When system is rebootCVE-2023-535967.8In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the CVE-2023-535975.5In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When thCVE-2023-535985.5In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Range check CHDBOFF and ERDBOFF If the value read fromCVE-2023-535995.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix missing initialisation affecting gcm-aes-s390 FixCVE-2023-53609.8The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unautheCVE-2023-536007.1In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to CVE-2023-536015.5In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb mac_header is set Drivers must not assume iCVE-2023-536025.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix memory leak in WMI firmware stats Memory allocated fCVE-2023-536035.5In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Avoid fcport pointer dereference Klocwork reported warn
CVE-2023-53592: Medium severity, CVSS 5.5 | Vulnix