What’s Vulnerable › Vulnerabilities

CVE-2023-54009: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path The cdns_i2c_master_xfer() function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currently one error path where the function exits directly, which leads to a leak of the runtime PM reference. Make sure that this error path also releases the runtime PM reference.

Affected products

• Linux kernel: 5.8 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2d65599ad1e4f195bbb80752cd5cbc2f1a018dba
• https://git.kernel.org/stable/c/5b14d7c6ba0ba5d167f5ef588ca6dfe1af6dd0aa
• https://git.kernel.org/stable/c/a712b5a95270e62209f5c2201c774f708f75234e
• https://git.kernel.org/stable/c/ae1664f04f504a998737f5bb563f16b44357bcca
• https://git.kernel.org/stable/c/d0dc6553b5f2b1272c01b0eba5fe2fd89cc59f44
• https://git.kernel.org/stable/c/fd7bf900c3215c77f6d779d1532faa22b79f2430

Get alerted when CVE-2023-54009 or the next vulnerability affects your stack