In the Linux kernel, the following vulnerability has been resolved:

leds: led-core: Fix refcount leak in of_led_get()

class_find_device_by_of_node() calls class_find_device(), it will take
the reference, use the put_device() to drop the reference when not need
anymore.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00026.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
699a8c7c4bd376aee4808e6272188319e900c8af affected < 1d6101d9222e1ca8c01b3fa9ebf0dcf7bcd82564
699a8c7c4bd376aee4808e6272188319e900c8af affected < 690efcb5827c3bacbf1de90cd14907b91bf8cb7b
699a8c7c4bd376aee4808e6272188319e900c8af affected < d880981b82223f9bf128dfdd2424abb0c658f345
699a8c7c4bd376aee4808e6272188319e900c8af affected < ddf3e82164afd9381b1d52c9f00b3878f7b6d308
699a8c7c4bd376aee4808e6272188319e900c8af affected < da1afe8e6099980fe1e2fd7436dca284af9d3f29
Linux Linux affected
Version Status Constraints
5.6 affected —
0 unaffected < 5.6
5.10.173 unaffected ≤ 5.10.*
5.15.99 unaffected ≤ 5.15.*
6.1.16 unaffected ≤ 6.1.*
6.2.3 unaffected ≤ 6.2.*
6.3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1d6101d9222e1ca8c01b3fa9ebf0dcf7bcd82564 cve-icon cve-icon
https://git.kernel.org/stable/c/690efcb5827c3bacbf1de90cd14907b91bf8cb7b cve-icon cve-icon
https://git.kernel.org/stable/c/d880981b82223f9bf128dfdd2424abb0c658f345 cve-icon cve-icon
https://git.kernel.org/stable/c/da1afe8e6099980fe1e2fd7436dca284af9d3f29 cve-icon cve-icon
https://git.kernel.org/stable/c/ddf3e82164afd9381b1d52c9f00b3878f7b6d308 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123027-CVE-2023-54190-7c7d@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54190 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54190 cve-icon
History

Thu, 01 Jan 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 30 Dec 2025 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: leds: led-core: Fix refcount leak in of_led_get() class_find_device_by_of_node() calls class_find_device(), it will take the reference, use the put_device() to drop the reference when not need anymore.
Title leds: led-core: Fix refcount leak in of_led_get()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-30T12:08:58.605Z

Reserved: 2025-12-30T12:06:44.498Z

Link: CVE-2023-54190

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:06.997

Modified: 2025-12-31T20:43:05.160

Link: CVE-2023-54190

cve-icon Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54190 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.