Not yet scoredPublished Dec 24, 2025

CVE-2023-54111pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups

Updated under an hour ago (Oct 27, 2026, 10:30 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups of_find_node_by_phandle() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d3e5116119bd02ea7716bbe04b39c21bba4bcf42 before aa017ab5716c9157c65fdce061c4a4a568af53a8; from d3e5116119bd02ea7716bbe04b39c21bba4bcf42 before 5868013522297bf628eee4322d99d6d4de4f308e; from d3e5116119bd02ea7716bbe04b39c21bba4bcf42 before 954a7a0011d94475f8ba5ceb77a5d11e01cf402f; from d3e5116119bd02ea7716bbe04b39c21bba4bcf42 before d562054a3a2eede3507a5461011ee82b671fcb88; from d3e5116119bd02ea7716bbe04b39c21bba4bcf42 before 0f735f232ff59863e0b6ebac0849d637e215a9c2; from d3e5116119bd02ea7716bbe04b39c21bba4bcf42 before dbef00ef4b9b98d15183340396e5df0fa7a860d8; from d3e5116119bd02ea7716bbe04b39c21bba4bcf42 before 3c40b34e3462aab12af3dba77d2e1602afc72e80; from d3e5116119bd02ea7716bbe04b39c21bba4bcf42 before c818ae563bf99457f02e8170aabd6b174f629f65	CNA record

References

References

https://git.kernel.org/stable/c/aa017ab5716c9157c65fdce061c4a4a568af53a8
https://git.kernel.org/stable/c/5868013522297bf628eee4322d99d6d4de4f308e
https://git.kernel.org/stable/c/954a7a0011d94475f8ba5ceb77a5d11e01cf402f
https://git.kernel.org/stable/c/d562054a3a2eede3507a5461011ee82b671fcb88
https://git.kernel.org/stable/c/0f735f232ff59863e0b6ebac0849d637e215a9c2
https://git.kernel.org/stable/c/dbef00ef4b9b98d15183340396e5df0fa7a860d8
https://git.kernel.org/stable/c/3c40b34e3462aab12af3dba77d2e1602afc72e80
https://git.kernel.org/stable/c/c818ae563bf99457f02e8170aabd6b174f629f65

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.