CVE-2023-54075
Reference Count Leak in Linux Kernel mediatek ASoC Component
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
| mediatek | common | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a refcount leak in the Linux kernel's ASoC mediatek common code, specifically in the parse_dai_link_info function. The issue arises because missing of_node_put() calls before return statements cause an imbalance with of_node_get() calls, especially when the for_each_available_child_of_node loop exits early. This leads to resource management problems in the kernel.
How can this vulnerability impact me? :
The refcount leak can cause resource leaks in the kernel, potentially leading to increased memory usage or instability in the affected system. Over time, this could degrade system performance or cause unexpected behavior in audio subsystem components relying on the affected code.