Not yet scoredPublished Dec 30, 2025

CVE-2023-54230amba: bus: fix refcount leak

Updated under an hour ago (Oct 28, 2026, 1:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak commit 5de1540b7bc4 ("drivers/amba: create devices from device tree") increases the refcount of of_node, but not releases it in amba_device_release, so there is refcount leak. By using of_node_put to avoid refcount leak.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5de1540b7bc4c23470f86add1e517be41e7fefe2 before 94e398df32e850f26828690ee62f7441979583cc; from 5de1540b7bc4c23470f86add1e517be41e7fefe2 before 9062ce0ccbd82fbe81cc839a512c0ad90847e01c; 5de1540b7bc4c23470f86add1e517be41e7fefe2 builds before 03db4fe7917bb160eeccf3968835475fa32b7e10; from 5de1540b7bc4c23470f86add1e517be41e7fefe2 before 9baf2278b3eed2c50112169121257d8a6ee0606c; 5de1540b7bc4c23470f86add1e517be41e7fefe2 builds before 4f1807fddd9bf175ee5e14fffc6b6106e4b297ef; from 5de1540b7bc4c23470f86add1e517be41e7fefe2 before 81ff633a88be2482c163d3acd2801d501261ce6a; from 5de1540b7bc4c23470f86add1e517be41e7fefe2 before 206fadb7278ceac7593dd0b945a77b9df856a674; from 5de1540b7bc4c23470f86add1e517be41e7fefe2 before 8b60a706166de5de82314494704c2419e7657bf8; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/94e398df32e850f26828690ee62f7441979583cc
https://git.kernel.org/stable/c/9062ce0ccbd82fbe81cc839a512c0ad90847e01c
https://git.kernel.org/stable/c/03db4fe7917bb160eeccf3968835475fa32b7e10
https://git.kernel.org/stable/c/9baf2278b3eed2c50112169121257d8a6ee0606c
https://git.kernel.org/stable/c/4f1807fddd9bf175ee5e14fffc6b6106e4b297ef
https://git.kernel.org/stable/c/81ff633a88be2482c163d3acd2801d501261ce6a
https://git.kernel.org/stable/c/206fadb7278ceac7593dd0b945a77b9df856a674
https://git.kernel.org/stable/c/8b60a706166de5de82314494704c2419e7657bf8
https://git.kernel.org/stable/c/e312cbdc11305568554a9e18a2ea5c2492c183f3

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.