Not yet scoredPublished Dec 8, 2025

CVE-2023-53818ARM: zynq: Fix refcount leak in zynq_early_slcr_init

Updated under an hour ago (Oct 27, 2026, 6:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ARM: zynq: Fix refcount leak in zynq_early_slcr_init of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on error path. Add missing of_node_put() to avoid refcount leak.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3329659df0300d1d0aa22f5e7063f83a88ef92aa before f00bc6727adf840eb208700ea27cda4f3742629d; 3329659df0300d1d0aa22f5e7063f83a88ef92aa builds before 351b7e93d02b50b2faae2d4bda28e16a8389cbb7; from 3329659df0300d1d0aa22f5e7063f83a88ef92aa before ede0334bf4df360f4f9446075cffbbb3bc54d0b6; 3329659df0300d1d0aa22f5e7063f83a88ef92aa builds before 227f8c1c5c4b3d131b66e57e58d38054f441b915; 3329659df0300d1d0aa22f5e7063f83a88ef92aa builds before 1cc12d10d13ae5ad8d3f7432a4c0156d221fc99b; from 3329659df0300d1d0aa22f5e7063f83a88ef92aa before e43a06c73be4b93d308f0df809ee0023b7c37b54; 3329659df0300d1d0aa22f5e7063f83a88ef92aa builds before 4c22ee805202087c2553c9175968e9e922d75bc1; 3329659df0300d1d0aa22f5e7063f83a88ef92aa builds before 9eedb910a3be0005b88c696a8552c0d4c9937cd4	CNA record

References

References

https://git.kernel.org/stable/c/f00bc6727adf840eb208700ea27cda4f3742629d
https://git.kernel.org/stable/c/351b7e93d02b50b2faae2d4bda28e16a8389cbb7
https://git.kernel.org/stable/c/ede0334bf4df360f4f9446075cffbbb3bc54d0b6
https://git.kernel.org/stable/c/227f8c1c5c4b3d131b66e57e58d38054f441b915
https://git.kernel.org/stable/c/1cc12d10d13ae5ad8d3f7432a4c0156d221fc99b
https://git.kernel.org/stable/c/e43a06c73be4b93d308f0df809ee0023b7c37b54
https://git.kernel.org/stable/c/4c22ee805202087c2553c9175968e9e922d75bc1
https://git.kernel.org/stable/c/9eedb910a3be0005b88c696a8552c0d4c9937cd4

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.