{"id":"CVE-2023-54230","state":"PUBLISHED","title":"amba: bus: fix refcount leak","description":"In the Linux kernel, the following vulnerability has been resolved:\n\namba: bus: fix refcount leak\n\ncommit 5de1540b7bc4 (\"drivers/amba: create devices from device tree\")\nincreases the refcount of of_node, but not releases it in\namba_device_release, so there is refcount leak. By using of_node_put\nto avoid refcount leak.","publishedAt":"2025-12-30T12:11:22.230Z","updatedAt":"2026-05-11T19:57:58.007Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"94e398df32e850f26828690ee62f7441979583cc","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"9062ce0ccbd82fbe81cc839a512c0ad90847e01c","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"03db4fe7917bb160eeccf3968835475fa32b7e10","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"9baf2278b3eed2c50112169121257d8a6ee0606c","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"4f1807fddd9bf175ee5e14fffc6b6106e4b297ef","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"81ff633a88be2482c163d3acd2801d501261ce6a","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"206fadb7278ceac7593dd0b945a77b9df856a674","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"8b60a706166de5de82314494704c2419e7657bf8","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"e312cbdc11305568554a9e18a2ea5c2492c183f3","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/amba/bus.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.1","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.1","versionType":"semver"},{"version":"4.14.326","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.295","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.257","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.195","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.132","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.53","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.16","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5.3","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/amba/bus.c"]}],"references":["https://git.kernel.org/stable/c/94e398df32e850f26828690ee62f7441979583cc","https://git.kernel.org/stable/c/9062ce0ccbd82fbe81cc839a512c0ad90847e01c","https://git.kernel.org/stable/c/03db4fe7917bb160eeccf3968835475fa32b7e10","https://git.kernel.org/stable/c/9baf2278b3eed2c50112169121257d8a6ee0606c","https://git.kernel.org/stable/c/4f1807fddd9bf175ee5e14fffc6b6106e4b297ef","https://git.kernel.org/stable/c/81ff633a88be2482c163d3acd2801d501261ce6a","https://git.kernel.org/stable/c/206fadb7278ceac7593dd0b945a77b9df856a674","https://git.kernel.org/stable/c/8b60a706166de5de82314494704c2419e7657bf8","https://git.kernel.org/stable/c/e312cbdc11305568554a9e18a2ea5c2492c183f3"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/54xxx/CVE-2023-54230.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-54230","state":"PUBLISHED","datePublished":"2025-12-30T12:11:22.230Z","dateUpdated":"2026-05-11T19:57:58.007Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-30T12:06:44.502Z"},"containers":{"cna":{"title":"amba: bus: fix refcount leak","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\namba: bus: fix refcount leak\n\ncommit 5de1540b7bc4 (\"drivers/amba: create devices from device tree\")\nincreases the refcount of of_node, but not releases it in\namba_device_release, so there is refcount leak. By using of_node_put\nto avoid refcount leak."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"94e398df32e850f26828690ee62f7441979583cc","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"9062ce0ccbd82fbe81cc839a512c0ad90847e01c","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"03db4fe7917bb160eeccf3968835475fa32b7e10","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"9baf2278b3eed2c50112169121257d8a6ee0606c","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"4f1807fddd9bf175ee5e14fffc6b6106e4b297ef","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"81ff633a88be2482c163d3acd2801d501261ce6a","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"206fadb7278ceac7593dd0b945a77b9df856a674","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"8b60a706166de5de82314494704c2419e7657bf8","versionType":"git"},{"version":"5de1540b7bc4c23470f86add1e517be41e7fefe2","status":"affected","lessThan":"e312cbdc11305568554a9e18a2ea5c2492c183f3","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/amba/bus.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.1","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.1","versionType":"semver"},{"version":"4.14.326","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.295","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.257","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.195","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.132","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.53","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.4.16","status":"unaffected","lessThanOrEqual":"6.4.*","versionType":"semver"},{"version":"6.5.3","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/amba/bus.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/94e398df32e850f26828690ee62f7441979583cc"},{"url":"https://git.kernel.org/stable/c/9062ce0ccbd82fbe81cc839a512c0ad90847e01c"},{"url":"https://git.kernel.org/stable/c/03db4fe7917bb160eeccf3968835475fa32b7e10"},{"url":"https://git.kernel.org/stable/c/9baf2278b3eed2c50112169121257d8a6ee0606c"},{"url":"https://git.kernel.org/stable/c/4f1807fddd9bf175ee5e14fffc6b6106e4b297ef"},{"url":"https://git.kernel.org/stable/c/81ff633a88be2482c163d3acd2801d501261ce6a"},{"url":"https://git.kernel.org/stable/c/206fadb7278ceac7593dd0b945a77b9df856a674"},{"url":"https://git.kernel.org/stable/c/8b60a706166de5de82314494704c2419e7657bf8"},{"url":"https://git.kernel.org/stable/c/e312cbdc11305568554a9e18a2ea5c2492c183f3"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:57:58.007Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"4.14.326"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"4.19.295"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"5.4.257"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"5.10.195"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"5.15.132"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"6.1.53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"6.4.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"6.5.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","versionEndExcluding":"6.6"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}