Not yet scoredPublished Dec 30, 2025

CVE-2023-54190leds: led-core: Fix refcount leak in of_led_get()

Updated under an hour ago (Oct 28, 2026, 1:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: leds: led-core: Fix refcount leak in of_led_get() class_find_device_by_of_node() calls class_find_device(), it will take the reference, use the put_device() to drop the reference when not need anymore.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	699a8c7c4bd376aee4808e6272188319e900c8af builds before 1d6101d9222e1ca8c01b3fa9ebf0dcf7bcd82564; 699a8c7c4bd376aee4808e6272188319e900c8af builds before 690efcb5827c3bacbf1de90cd14907b91bf8cb7b; from 699a8c7c4bd376aee4808e6272188319e900c8af before d880981b82223f9bf128dfdd2424abb0c658f345; from 699a8c7c4bd376aee4808e6272188319e900c8af before ddf3e82164afd9381b1d52c9f00b3878f7b6d308; from 699a8c7c4bd376aee4808e6272188319e900c8af before da1afe8e6099980fe1e2fd7436dca284af9d3f29	CNA record

References

References

https://git.kernel.org/stable/c/1d6101d9222e1ca8c01b3fa9ebf0dcf7bcd82564
https://git.kernel.org/stable/c/690efcb5827c3bacbf1de90cd14907b91bf8cb7b
https://git.kernel.org/stable/c/d880981b82223f9bf128dfdd2424abb0c658f345
https://git.kernel.org/stable/c/ddf3e82164afd9381b1d52c9f00b3878f7b6d308
https://git.kernel.org/stable/c/da1afe8e6099980fe1e2fd7436dca284af9d3f29

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.