CVE-2023-53170: net: dsa: Removed unneeded of_node_put in felix_parse_ports_node

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-15 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: Removed unneeded of_node_put in felix_parse_ports_node Remove unnecessary of_node_put from the continue path to prevent child node from being released twice, which could avoid resource leak or other unexpected issues.

Affected products

Linux kernel: from 6.3 before 6.4.5; 6.5-rc1 — fixed in 6.4.5

How to fix

Upgrade to a fixed version: Linux kernel 6.4.5. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/04499f28b40bfc24f20b0e2331008bb90a54a6cf
https://git.kernel.org/stable/c/7ead10b44b79ce8bfcd51e749d54e009de5f511a

Get alerted when CVE-2023-53170 or the next vulnerability affects your stack