CVE-2023-53818 - Vulnerability Details

- ARM: zynq: Fix refcount leak in zynq_early_slcr_init

Description

In the Linux kernel, the following vulnerability has been resolved:

ARM: zynq: Fix refcount leak in zynq_early_slcr_init

of_find_compatible_node() returns a node pointer with refcount incremented,
we should use of_node_put() on error path.
Add missing of_node_put() to avoid refcount leak.

Published: 2025-12-09

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`3329659df0300d1d0aa22f5e7063f83a88ef92aa`	affected	< f00bc6727adf840eb208700ea27cda4f3742629d
`3329659df0300d1d0aa22f5e7063f83a88ef92aa`	affected	< 351b7e93d02b50b2faae2d4bda28e16a8389cbb7
`3329659df0300d1d0aa22f5e7063f83a88ef92aa`	affected	< ede0334bf4df360f4f9446075cffbbb3bc54d0b6
`3329659df0300d1d0aa22f5e7063f83a88ef92aa`	affected	< 227f8c1c5c4b3d131b66e57e58d38054f441b915
`3329659df0300d1d0aa22f5e7063f83a88ef92aa`	affected	< 1cc12d10d13ae5ad8d3f7432a4c0156d221fc99b
`3329659df0300d1d0aa22f5e7063f83a88ef92aa`	affected	< e43a06c73be4b93d308f0df809ee0023b7c37b54
`3329659df0300d1d0aa22f5e7063f83a88ef92aa`	affected	< 4c22ee805202087c2553c9175968e9e922d75bc1
`3329659df0300d1d0aa22f5e7063f83a88ef92aa`	affected	< 9eedb910a3be0005b88c696a8552c0d4c9937cd4

Linux

affected

Version	Status	Constraints
`4.0`	affected	—
`0`	unaffected	< 4.0
`4.14.308`	unaffected	≤ 4.14.*
`4.19.276`	unaffected	≤ 4.19.*
`5.4.235`	unaffected	≤ 5.4.*
`5.10.173`	unaffected	≤ 5.10.*
`5.15.99`	unaffected	≤ 5.15.*
`6.1.16`	unaffected	≤ 6.1.*
`6.2.3`	unaffected	≤ 6.2.*
`6.3`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00029.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1cc12d10d13ae5ad8d3f7432a4c0156d221fc99b
https://git.kernel.org/stable/c/227f8c1c5c4b3d131b66e57e58d38054f441b915
https://git.kernel.org/stable/c/351b7e93d02b50b2faae2d4bda28e16a8389cbb7
https://git.kernel.org/stable/c/4c22ee805202087c2553c9175968e9e922d75bc1
https://git.kernel.org/stable/c/9eedb910a3be0005b88c696a8552c0d4c9937cd4
https://git.kernel.org/stable/c/e43a06c73be4b93d308f0df809ee0023b7c37b54
https://git.kernel.org/stable/c/ede0334bf4df360f4f9446075cffbbb3bc54d0b6
https://git.kernel.org/stable/c/f00bc6727adf840eb208700ea27cda4f3742629d
https://lore.kernel.org/linux-cve-announce/2025120945-CVE-2023-53818-4c46@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-53818
https://www.cve.org/CVERecord?id=CVE-2023-53818

History

Wed, 10 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025120945-CVE-2023-53818-4c46@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-53818 https://www.cve.org/CVERecord?id=CVE-2023-53818
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Tue, 09 Dec 2025 00:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ARM: zynq: Fix refcount leak in zynq_early_slcr_init of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on error path. Add missing of_node_put() to avoid refcount leak.
Title		ARM: zynq: Fix refcount leak in zynq_early_slcr_init
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1cc12d10d13ae5ad8d3f7432a4c0156d221fc99b https://git.kernel.org/stable/c/227f8c1c5c4b3d131b66e57e58d38054f441b915 https://git.kernel.org/stable/c/351b7e93d02b50b2faae2d4bda28e16a8389cbb7 https://git.kernel.org/stable/c/4c22ee805202087c2553c9175968e9e922d75bc1 https://git.kernel.org/stable/c/9eedb910a3be0005b88c696a8552c0d4c9937cd4 https://git.kernel.org/stable/c/e43a06c73be4b93d308f0df809ee0023b7c37b54 https://git.kernel.org/stable/c/ede0334bf4df360f4f9446075cffbbb3bc54d0b6 https://git.kernel.org/stable/c/f00bc6727adf840eb208700ea27cda4f3742629d

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-09T00:01:16.630Z

Updated: 2026-05-11T19:52:07.693Z

Reserved: 2025-12-08T23:58:35.277Z

Link: CVE-2023-53818

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-09T01:16:54.093

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-53818

Redhat

Severity : Low

Publid Date: 2025-12-09T00:00:00Z

Links: CVE-2023-53818 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object