CVE-2023-54230

amba: bus: fix refcount leak

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

amba: bus: fix refcount leak

commit 5de1540b7bc4 ("drivers/amba: create devices from device tree") increases the refcount of of_node, but not releases it in amba_device_release, so there is refcount leak. By using of_node_put to avoid refcount leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 94e398df32e850f26828690ee62f7441979583ccAffected 5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 9062ce0ccbd82fbe81cc839a512c0ad90847e01cAffected 5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 03db4fe7917bb160eeccf3968835475fa32b7e10Affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 9baf2278b3eed2c50112169121257d8a6ee0606cAffected 5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 4f1807fddd9bf175ee5e14fffc6b6106e4b297efAffected 5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 81ff633a88be2482c163d3acd2801d501261ce6aAffected 5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 206fadb7278ceac7593dd0b945a77b9df856a674Affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 8b60a706166de5de82314494704c2419e7657bf8Affected 5de1540b7bc4c23470f86add1e517be41e7fefe2 to before e312cbdc11305568554a9e18a2ea5c2492c183f3Affected
LinuxLinux	3.1Affected before 3.1Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 94e398df32e850f26828690ee62f7441979583ccAffected
5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 9062ce0ccbd82fbe81cc839a512c0ad90847e01cAffected
5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 03db4fe7917bb160eeccf3968835475fa32b7e10Affected
5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 9baf2278b3eed2c50112169121257d8a6ee0606cAffected
5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 4f1807fddd9bf175ee5e14fffc6b6106e4b297efAffected
5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 81ff633a88be2482c163d3acd2801d501261ce6aAffected
5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 206fadb7278ceac7593dd0b945a77b9df856a674Affected
5de1540b7bc4c23470f86add1e517be41e7fefe2 to before 8b60a706166de5de82314494704c2419e7657bf8Affected
5de1540b7bc4c23470f86add1e517be41e7fefe2 to before e312cbdc11305568554a9e18a2ea5c2492c183f3Affected

LinuxLinux

3.1Affected
before 3.1Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.