Not yet scoredPublished Dec 30, 2025

CVE-2023-54205pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain

Updated under an hour ago (Oct 26, 2026, 7:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d86f4d71e42a9fa1866f030074e54d7571d16ec1 before 95ab6d7905ebb52dc2ed6357c38e536753824068; from d86f4d71e42a9fa1866f030074e54d7571d16ec1 before 8ab860dd8717a7e4a143988885fea0d7e5a9412e; from d86f4d71e42a9fa1866f030074e54d7571d16ec1 before af54707c0ccab52b3d532402436ea101011a9299; from d86f4d71e42a9fa1866f030074e54d7571d16ec1 before 601be03fa8b81747a154bdef9b559411a5b921e8; from d86f4d71e42a9fa1866f030074e54d7571d16ec1 before 9ae053d1eb87875d56f95b6a123a69827225a70e; from d86f4d71e42a9fa1866f030074e54d7571d16ec1 before dcef18c8ac40aa85bb339f64c1dd31dd458b06fb	CNA record

References

References

https://git.kernel.org/stable/c/95ab6d7905ebb52dc2ed6357c38e536753824068
https://git.kernel.org/stable/c/8ab860dd8717a7e4a143988885fea0d7e5a9412e
https://git.kernel.org/stable/c/af54707c0ccab52b3d532402436ea101011a9299
https://git.kernel.org/stable/c/601be03fa8b81747a154bdef9b559411a5b921e8
https://git.kernel.org/stable/c/9ae053d1eb87875d56f95b6a123a69827225a70e
https://git.kernel.org/stable/c/dcef18c8ac40aa85bb339f64c1dd31dd458b06fb

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.