In the Linux kernel, the following vulnerability has been resolved:

pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain

of_irq_find_parent() returns a node pointer with refcount incremented,
We should use of_node_put() on it when not needed anymore.
Add missing of_node_put() to avoid refcount leak.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00035.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d86f4d71e42a9fa1866f030074e54d7571d16ec1 affected < 95ab6d7905ebb52dc2ed6357c38e536753824068
d86f4d71e42a9fa1866f030074e54d7571d16ec1 affected < 8ab860dd8717a7e4a143988885fea0d7e5a9412e
d86f4d71e42a9fa1866f030074e54d7571d16ec1 affected < af54707c0ccab52b3d532402436ea101011a9299
d86f4d71e42a9fa1866f030074e54d7571d16ec1 affected < 601be03fa8b81747a154bdef9b559411a5b921e8
d86f4d71e42a9fa1866f030074e54d7571d16ec1 affected < 9ae053d1eb87875d56f95b6a123a69827225a70e
d86f4d71e42a9fa1866f030074e54d7571d16ec1 affected < dcef18c8ac40aa85bb339f64c1dd31dd458b06fb
Linux Linux affected
Version Status Constraints
5.2 affected —
0 unaffected < 5.2
5.4.235 unaffected ≤ 5.4.*
5.10.173 unaffected ≤ 5.10.*
5.15.99 unaffected ≤ 5.15.*
6.1.16 unaffected ≤ 6.1.*
6.2.3 unaffected ≤ 6.2.*
6.3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/601be03fa8b81747a154bdef9b559411a5b921e8 cve-icon cve-icon
https://git.kernel.org/stable/c/8ab860dd8717a7e4a143988885fea0d7e5a9412e cve-icon cve-icon
https://git.kernel.org/stable/c/95ab6d7905ebb52dc2ed6357c38e536753824068 cve-icon cve-icon
https://git.kernel.org/stable/c/9ae053d1eb87875d56f95b6a123a69827225a70e cve-icon cve-icon
https://git.kernel.org/stable/c/af54707c0ccab52b3d532402436ea101011a9299 cve-icon cve-icon
https://git.kernel.org/stable/c/dcef18c8ac40aa85bb339f64c1dd31dd458b06fb cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123022-CVE-2023-54205-966b@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54205 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54205 cve-icon
History

Wed, 31 Dec 2025 00:15:00 +0000

Type Values Removed Values Added
References

Tue, 30 Dec 2025 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.
Title pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-30T12:11:05.295Z

Reserved: 2025-12-30T12:06:44.499Z

Link: CVE-2023-54205

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:08.640

Modified: 2025-12-31T20:43:05.160

Link: CVE-2023-54205

cve-icon Redhat

Severity :

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54205 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.