Strix
26.1K

CVE-2023-54111

UnknownEPSS 0.18%

Last modified

CVE-2023-54111 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups of_find_node_by_phandle() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups of_find_node_by_phandle() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.

Metrics

EPSS Probability
0.18%

8.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d3e5116119bd02ea7716bbe04b39c21bba4bcf42, < aa017ab5716c9157c65fdce061c4a4a568af53a8; >= d3e5116119bd02ea7716bbe04b39c21bba4bcf42, < 5868013522297bf628eee4322d99d6d4de4f308e; >= d3e5116119bd02ea7716bbe04b39c21bba4bcf42, < 954a7a0011d94475f8ba5ceb77a5d11e01cf402f; >= d3e5116119bd02ea7716bbe04b39c21bba4bcf42, < d562054a3a2eede3507a5461011ee82b671fcb88; >= d3e5116119bd02ea7716bbe04b39c21bba4bcf42, < 0f735f232ff59863e0b6ebac0849d637e215a9c2; >= d3e5116119bd02ea7716bbe04b39c21bba4bcf42, < dbef00ef4b9b98d15183340396e5df0fa7a860d8; >= d3e5116119bd02ea7716bbe04b39c21bba4bcf42, < 3c40b34e3462aab12af3dba77d2e1602afc72e80; >= d3e5116119bd02ea7716bbe04b39c21bba4bcf42, < c818ae563bf99457f02e8170aabd6b174f629f65
LinuxLinux3.11

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2023-54111?
In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups of_find_node_by_phandle() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.
How severe is CVE-2023-54111?
Severity scoring for CVE-2023-54111 is pending analysis. The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2023-54111?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-54111?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST