CVE-2023-54111
Reference Count Leak in Linux Kernel Rockchip Pinctrl Component
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| rockchip | pinctrl | * |
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a reference count leak in the rockchip pinctrl driver of the Linux kernel. Specifically, the function of_find_node_by_phandle() returns a node pointer with its reference count incremented, but the code was missing a call to of_node_put() to decrement the reference count when the node is no longer needed. This missing call causes a refcount leak.
How can this vulnerability impact me? :
The impact of this vulnerability is a resource leak in the kernel's pinctrl driver, which could lead to increased memory usage or resource exhaustion over time. However, there is no indication that this leads to privilege escalation or direct security compromise.