What’s Vulnerable › Vulnerabilities

CVE-2023-53443: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak In arizona_clk32k_enable(), we should use pm_runtime_resume_and_get() as pm_runtime_get_sync() will increase the refcnt even when it returns an error.

Affected products

• Linux kernel: before 5.4.235; from 5.5 before 5.10.173; from 5.11 before 5.15.100; from 5.16 before 6.1.18; from 6.2 before 6.2.5 — fixed in 5.10.173, 5.15.100, 5.4.235, 6.1.18, 6.2.5

How to fix

Upgrade to a fixed version: Linux kernel 5.10.173, 5.15.100, 5.4.235, 6.1.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4414a7ab80cebf715045e3c4d465feefbad21139
• https://git.kernel.org/stable/c/5a47bb71b1a94a279144fc3031d3c4591b38dd16
• https://git.kernel.org/stable/c/7195e642b49af60d4120fa1b45bd812ba528174f
• https://git.kernel.org/stable/c/754e81ff44061dda68da0fd4ef51bd1aa9fbf2cf
• https://git.kernel.org/stable/c/9893771097b22a8743a446e45994a177795ca4da
• https://git.kernel.org/stable/c/dc9437e9889c3dacf1f320e3cf08da74127573fe

Get alerted when CVE-2023-53443 or the next vulnerability affects your stack