Not yet scoredPublished Dec 30, 2025

CVE-2023-54175i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path

Updated under an hour ago (Oct 27, 2026, 6:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path The xiic_xfer() function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currently one error path where the function exits directly, which leads to a leak of the runtime PM reference. Make sure that this error path also releases the runtime PM reference.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	30def367fa205d81e2880f5390b8c43ed66a9667 builds before 2d320d9de7d31c0eb279b3f8a02cf1af473a3737; from c7ed4ddaa5a236bde32de46266a9b0e55701201d before 72cb227a368cf286efb8ce1e741e8c7085747b4d; from fdacc3c7405d1fc33c1f2771699a4fc24551e480 before 06e661a259978305c0015f6f33d14477a0cfbe8f; from fdacc3c7405d1fc33c1f2771699a4fc24551e480 before 6027d84c073e26cb1b32a90d69c5fbad57776406; from fdacc3c7405d1fc33c1f2771699a4fc24551e480 before 688fdfc458bfa651dca39c736d39c1b7520af0e8; from fdacc3c7405d1fc33c1f2771699a4fc24551e480 before d663d93bb47e7ab45602b227701022d8aa16040a	CNA record

References

References

https://git.kernel.org/stable/c/2d320d9de7d31c0eb279b3f8a02cf1af473a3737
https://git.kernel.org/stable/c/72cb227a368cf286efb8ce1e741e8c7085747b4d
https://git.kernel.org/stable/c/06e661a259978305c0015f6f33d14477a0cfbe8f
https://git.kernel.org/stable/c/6027d84c073e26cb1b32a90d69c5fbad57776406
https://git.kernel.org/stable/c/688fdfc458bfa651dca39c736d39c1b7520af0e8
https://git.kernel.org/stable/c/d663d93bb47e7ab45602b227701022d8aa16040a

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.