CVE-2023-54075: ASoC: mediatek: common: Fix refcount leak in parse_dai_link_info

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: common: Fix refcount leak in parse_dai_link_info Add missing of_node_put()s before the returns to balance of_node_get()s and of_node_put()s, which may get unbalanced in case the for loop 'for_each_available_child_of_node' returns early.

Affected products

Linux kernel: 6.3 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/3e40722d55805584dc04d8594d912820cafb2432
https://git.kernel.org/stable/c/beed115c2ce78f990222a29abed042582df4e87c

Get alerted when CVE-2023-54075 or the next vulnerability affects your stack