CVE-2023-54190

leds: led-core: Fix refcount leak in of_led_get()

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

leds: led-core: Fix refcount leak in of_led_get()

class_find_device_by_of_node() calls class_find_device(), it will take the reference, use the put_device() to drop the reference when not need anymore.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	699a8c7c4bd376aee4808e6272188319e900c8af to before 1d6101d9222e1ca8c01b3fa9ebf0dcf7bcd82564Affected 699a8c7c4bd376aee4808e6272188319e900c8af to before 690efcb5827c3bacbf1de90cd14907b91bf8cb7bAffected 699a8c7c4bd376aee4808e6272188319e900c8af to before d880981b82223f9bf128dfdd2424abb0c658f345Affected 699a8c7c4bd376aee4808e6272188319e900c8af to before ddf3e82164afd9381b1d52c9f00b3878f7b6d308Affected 699a8c7c4bd376aee4808e6272188319e900c8af to before da1afe8e6099980fe1e2fd7436dca284af9d3f29Affected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

699a8c7c4bd376aee4808e6272188319e900c8af to before 1d6101d9222e1ca8c01b3fa9ebf0dcf7bcd82564Affected
699a8c7c4bd376aee4808e6272188319e900c8af to before 690efcb5827c3bacbf1de90cd14907b91bf8cb7bAffected
699a8c7c4bd376aee4808e6272188319e900c8af to before d880981b82223f9bf128dfdd2424abb0c658f345Affected
699a8c7c4bd376aee4808e6272188319e900c8af to before ddf3e82164afd9381b1d52c9f00b3878f7b6d308Affected
699a8c7c4bd376aee4808e6272188319e900c8af to before da1afe8e6099980fe1e2fd7436dca284af9d3f29Affected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.