Not yet scoredPublished Oct 22, 2025

CVE-2023-53719serial: arc_uart: fix of_iomap leak in `arc_serial_probe`

Updated under an hour ago (Oct 27, 2026, 4:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: serial: arc_uart: fix of_iomap leak in `arc_serial_probe` Smatch reports: drivers/tty/serial/arc_uart.c:631 arc_serial_probe() warn: 'port->membase' from of_iomap() not released on lines: 631. In arc_serial_probe(), if uart_add_one_port() fails, port->membase is not released, which would cause a resource leak. To fix this, I replace of_iomap with devm_platform_ioremap_resource.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a builds before 3f00df24a5021a6f02c1830a290acd4bceb22a2d; from 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a before 7525aa211758cc023a371e010d16ceaae1057807; from 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a before 153017561d2804cfae87cc9aa377aa84dd906ae1; from 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a before f76a18e53a66c0ef2938276110717b3805720cd9; from 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a before 081790eee6b47389a0d895262086d64c6a38d6e5; from 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a before 40a462313ba4f337a2b419e7fb4a670f3dd95e14; 8dbe1d5e09a7faec8d22cadcc1011acab8fa6e2a builds before 8ab5fc55d7f65d58a3c3aeadf11bdf60267cd2bd	CNA record

References

References

https://git.kernel.org/stable/c/3f00df24a5021a6f02c1830a290acd4bceb22a2d
https://git.kernel.org/stable/c/7525aa211758cc023a371e010d16ceaae1057807
https://git.kernel.org/stable/c/153017561d2804cfae87cc9aa377aa84dd906ae1
https://git.kernel.org/stable/c/f76a18e53a66c0ef2938276110717b3805720cd9
https://git.kernel.org/stable/c/081790eee6b47389a0d895262086d64c6a38d6e5
https://git.kernel.org/stable/c/40a462313ba4f337a2b419e7fb4a670f3dd95e14
https://git.kernel.org/stable/c/8ab5fc55d7f65d58a3c3aeadf11bdf60267cd2bd

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.