What’s Vulnerable › Vulnerabilities

CVE-2023-54175: i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path The xiic_xfer() function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currently one error path where the function exits directly, which leads to a leak of the runtime PM reference. Make sure that this error path also releases the runtime PM reference.

Affected products

• Linux kernel: 5.16 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/06e661a259978305c0015f6f33d14477a0cfbe8f
• https://git.kernel.org/stable/c/2d320d9de7d31c0eb279b3f8a02cf1af473a3737
• https://git.kernel.org/stable/c/6027d84c073e26cb1b32a90d69c5fbad57776406
• https://git.kernel.org/stable/c/688fdfc458bfa651dca39c736d39c1b7520af0e8
• https://git.kernel.org/stable/c/72cb227a368cf286efb8ce1e741e8c7085747b4d
• https://git.kernel.org/stable/c/d663d93bb47e7ab45602b227701022d8aa16040a

Get alerted when CVE-2023-54175 or the next vulnerability affects your stack