What’s Vulnerable › Vulnerabilities

CVE-2023-54190: leds: led-core: Fix refcount leak in of_led_get()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-10-28

Description

In the Linux kernel, the following vulnerability has been resolved: leds: led-core: Fix refcount leak in of_led_get() class_find_device_by_of_node() calls class_find_device(), it will take the reference, use the put_device() to drop the reference when not need anymore.

Affected products

• Linux kernel: 5.6 — fixed in 6.3

How to fix

Upgrade to a fixed version: Linux kernel 6.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1d6101d9222e1ca8c01b3fa9ebf0dcf7bcd82564
• https://git.kernel.org/stable/c/690efcb5827c3bacbf1de90cd14907b91bf8cb7b
• https://git.kernel.org/stable/c/d880981b82223f9bf128dfdd2424abb0c658f345
• https://git.kernel.org/stable/c/da1afe8e6099980fe1e2fd7436dca284af9d3f29
• https://git.kernel.org/stable/c/ddf3e82164afd9381b1d52c9f00b3878f7b6d308

Get alerted when CVE-2023-54190 or the next vulnerability affects your stack