What’s Vulnerable › Vulnerabilities

CVE-2023-54205: pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-10-28

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.

Affected products

• Linux kernel: 5.2 — fixed in 6.3

How to fix

Upgrade to a fixed version: Linux kernel 6.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/601be03fa8b81747a154bdef9b559411a5b921e8
• https://git.kernel.org/stable/c/8ab860dd8717a7e4a143988885fea0d7e5a9412e
• https://git.kernel.org/stable/c/95ab6d7905ebb52dc2ed6357c38e536753824068
• https://git.kernel.org/stable/c/9ae053d1eb87875d56f95b6a123a69827225a70e
• https://git.kernel.org/stable/c/af54707c0ccab52b3d532402436ea101011a9299
• https://git.kernel.org/stable/c/dcef18c8ac40aa85bb339f64c1dd31dd458b06fb

Get alerted when CVE-2023-54205 or the next vulnerability affects your stack