What’s Vulnerable › Vulnerabilities

CVE-2023-53533: Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-04 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe rpi_firmware_get() take reference, we need to release it in error paths as well. Use devm_rpi_firmware_get() helper to handling the resources. Also remove the existing rpi_firmware_put().

Affected products

• Linux kernel: from 5.0 before 5.4.243; from 5.5 before 5.10.180; from 5.11 before 5.15.111; from 5.16 before 6.1.28; from 6.2 before 6.2.15; from 6.3 before 6.3.2 — fixed in 5.10.180, 5.15.111, 5.4.243, 6.1.28, 6.2.15, 6.3.2

How to fix

Upgrade to a fixed version: Linux kernel 5.10.180, 5.15.111, 5.4.243, 6.1.28. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0d6a5c9489c8a3d434e685066119c4333476dccd
• https://git.kernel.org/stable/c/1dfa3c9dd27bdc347733d06e980395768520bc3e
• https://git.kernel.org/stable/c/36d087e49dabd28d2c13a7532dac72d625ce69fb
• https://git.kernel.org/stable/c/5bca3688bdbc3b58a2894b8671a8e2378efe28bd
• https://git.kernel.org/stable/c/7acad58049acc6ac148e8b613a6eceeca4bcb4a7
• https://git.kernel.org/stable/c/9216aa5cfd86809a2681be3683cd9ac30432de0c
• https://git.kernel.org/stable/c/9dbbe9db224c23a60dc7b1e00c701be93328c873

Get alerted when CVE-2023-53533 or the next vulnerability affects your stack