Vulnerability in Linux

CVE-2023-54230

In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak commit 5de1540b7bc4 ("drivers/amba: create devices from device tree") increases the refcount of of_node, but not releases it in amba_device_release, so there is refcount leak. By using of_node_put to avoid refcount leak.

EPSS: 0.002 (10.6th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 5de1540b7bc4c23470f86add1e517be41e7fefe2, 3.1, 0

References