CVE-2023-54230
Reference Count Leak in Linux Kernel AMBA Bus Driver
Publication date: 2025-12-30
Last updated on: 2025-12-30
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a reference count leak in the Linux kernel's AMBA bus driver. Specifically, the code increases the reference count of an of_node object when creating devices from the device tree but fails to release it properly in the amba_device_release function. This leads to a reference count leak, which was fixed by using of_node_put to correctly release the reference.
How can this vulnerability impact me? :
The reference count leak can lead to resource leaks in the kernel, potentially causing increased memory usage or instability over time. This could degrade system performance or reliability, especially in systems heavily using the AMBA bus devices.