CVE-2023-53757 - Vulnerability Details

- irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe

of_irq_find_parent() returns a node pointer with refcount incremented,
We should use of_node_put() on it when not needed anymore.
Add missing of_node_put() to avoid refcount leak.

Published: 2025-12-08

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`a68a63cb4dfc30e8a79b444aabc7747bb7621acf`	affected	< d6b99b9b5e354f9c801a3cc3b1d4881d920e1718
`a68a63cb4dfc30e8a79b444aabc7747bb7621acf`	affected	< 4545d7a70ce0fc78b1d3c33c4a0939a86f363b57
`a68a63cb4dfc30e8a79b444aabc7747bb7621acf`	affected	< c7d78d36e19eeb74a1c12799fbadbcdbaf36c0bd
`a68a63cb4dfc30e8a79b444aabc7747bb7621acf`	affected	< cee12e8be8e227731a845ae43a4c9ce2e404be45
`a68a63cb4dfc30e8a79b444aabc7747bb7621acf`	affected	< 88cb93d3a16f706bd7213f8a5882c394e5d10c4e
`a68a63cb4dfc30e8a79b444aabc7747bb7621acf`	affected	< bb755e020abc24793b9411c9419ed43f07f9a03d
`a68a63cb4dfc30e8a79b444aabc7747bb7621acf`	affected	< 91e149b201bdb68c77011d50d011e47fadbcc8bd
`a68a63cb4dfc30e8a79b444aabc7747bb7621acf`	affected	< 9419e700021a393f67be36abd0c4f3acc6139041

Linux

affected

Version	Status	Constraints
`4.13`	affected	—
`0`	unaffected	< 4.13
`4.14.308`	unaffected	≤ 4.14.*
`4.19.276`	unaffected	≤ 4.19.*
`5.4.235`	unaffected	≤ 5.4.*
`5.10.173`	unaffected	≤ 5.10.*
`5.15.99`	unaffected	≤ 5.15.*
`6.1.16`	unaffected	≤ 6.1.*
`6.2.3`	unaffected	≤ 6.2.*
`6.3`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00029.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/4545d7a70ce0fc78b1d3c33c4a0939a86f363b57
https://git.kernel.org/stable/c/88cb93d3a16f706bd7213f8a5882c394e5d10c4e
https://git.kernel.org/stable/c/91e149b201bdb68c77011d50d011e47fadbcc8bd
https://git.kernel.org/stable/c/9419e700021a393f67be36abd0c4f3acc6139041
https://git.kernel.org/stable/c/bb755e020abc24793b9411c9419ed43f07f9a03d
https://git.kernel.org/stable/c/c7d78d36e19eeb74a1c12799fbadbcdbaf36c0bd
https://git.kernel.org/stable/c/cee12e8be8e227731a845ae43a4c9ce2e404be45
https://git.kernel.org/stable/c/d6b99b9b5e354f9c801a3cc3b1d4881d920e1718
https://lore.kernel.org/linux-cve-announce/2025120844-CVE-2023-53757-8c1e@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-53757
https://www.cve.org/CVERecord?id=CVE-2023-53757

History

Tue, 09 Dec 2025 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025120844-CVE-2023-53757-8c1e@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-53757 https://www.cve.org/CVERecord?id=CVE-2023-53757
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Mon, 08 Dec 2025 02:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.
Title		irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/4545d7a70ce0fc78b1d3c33c4a0939a86f363b57 https://git.kernel.org/stable/c/88cb93d3a16f706bd7213f8a5882c394e5d10c4e https://git.kernel.org/stable/c/91e149b201bdb68c77011d50d011e47fadbcc8bd https://git.kernel.org/stable/c/9419e700021a393f67be36abd0c4f3acc6139041 https://git.kernel.org/stable/c/bb755e020abc24793b9411c9419ed43f07f9a03d https://git.kernel.org/stable/c/c7d78d36e19eeb74a1c12799fbadbcdbaf36c0bd https://git.kernel.org/stable/c/cee12e8be8e227731a845ae43a4c9ce2e404be45 https://git.kernel.org/stable/c/d6b99b9b5e354f9c801a3cc3b1d4881d920e1718

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-08T01:19:18.181Z

Updated: 2026-05-11T19:51:05.668Z

Reserved: 2025-12-08T01:18:04.280Z

Link: CVE-2023-53757

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-08T02:15:51.383

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-53757

Redhat

Severity : Moderate

Publid Date: 2025-12-08T00:00:00Z

Links: CVE-2023-53757 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object