What’s Vulnerable › Vulnerabilities

CVE-2023-53592: gpio: sifive: Fix refcount leak in sifive_gpio_probe

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-04 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: sifive: Fix refcount leak in sifive_gpio_probe of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.

Affected products

• Linux kernel: from 5.6 before 5.10.163; from 5.11 before 5.15.87; from 5.16 before 6.0.19; from 6.1 before 6.1.5; 6.2-rc1, 6.2-rc2 — fixed in 5.10.163, 5.15.87, 6.0.19, 6.1.5

How to fix

Upgrade to a fixed version: Linux kernel 5.10.163, 5.15.87, 6.0.19, 6.1.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/694175cd8a1643cde3acb45c9294bca44a8e08e9
• https://git.kernel.org/stable/c/95da1882ce9372ba20278f87cdb7a34f9812c4b5
• https://git.kernel.org/stable/c/9a402a210798662b04cbe6ca466e916a15efa03a
• https://git.kernel.org/stable/c/f4a2ad1002006548e235255c65a4f1d07312be9d
• https://git.kernel.org/stable/c/f9fb4776ebbc16dfc512adbdc0fe218acb47c7cc

Get alerted when CVE-2023-53592 or the next vulnerability affects your stack