Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2023-54205— pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain

AI Predicted 3.3 Difficulty: Moderate EPSS 0.18% · P8

Possible ATT&CK Techniques 1AI

T1564.008 · Email Hiding Rules

Affected Version Matrix 14

VendorProductVersion RangeStatus
LinuxLinuxd86f4d71e42a9fa1866f030074e54d7571d16ec1< 95ab6d7905ebb52dc2ed6357c38e536753824068affected
d86f4d71e42a9fa1866f030074e54d7571d16ec1< 8ab860dd8717a7e4a143988885fea0d7e5a9412eaffected
d86f4d71e42a9fa1866f030074e54d7571d16ec1< af54707c0ccab52b3d532402436ea101011a9299affected
d86f4d71e42a9fa1866f030074e54d7571d16ec1< 601be03fa8b81747a154bdef9b559411a5b921e8affected
d86f4d71e42a9fa1866f030074e54d7571d16ec1< 9ae053d1eb87875d56f95b6a123a69827225a70eaffected
d86f4d71e42a9fa1866f030074e54d7571d16ec1< dcef18c8ac40aa85bb339f64c1dd31dd458b06fbaffected
5.2affected
< 5.2unaffected
… +6 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-54205

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于pinctrl stm32驱动存在引用计数泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux d86f4d71e42a9fa1866f030074e54d7571d16ec1 ~ 95ab6d7905ebb52dc2ed6357c38e536753824068 -
LinuxLinux 5.2 -

II. Public POCs for CVE-2023-54205

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-54205

登录查看更多情报信息。

Other References for CVE-2023-54205 (6)

Same Patch Batch · Linux · 2025-12-30 · 244 CVEs total

CVE-2023-541849.8 CRITICALscsi: target: iscsit: Free cmds before session free
CVE-2023-542239.8 CRITICALnet/mlx5e: xsk: Fix invalid buffer access for legacy rq
CVE-2023-542379.8 CRITICALnet/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
CVE-2023-542579.8 CRITICALnet: macb: fix a memory corruption in extended buffer descriptor mode
CVE-2023-542589.8 CRITICALcifs: fix potential oops in cifs_oplock_break
CVE-2023-542699.8 CRITICALSUNRPC: double free xprt_ctxt while still in use
CVE-2023-542809.8 CRITICALcifs: fix potential race when tree connecting ipc
CVE-2023-542929.8 CRITICALRDMA/irdma: Fix data race on CQP request done
CVE-2023-542039.1 CRITICALksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
CVE-2022-508808.8 HIGHwifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
CVE-2023-542628.8 HIGHnet/mlx5e: Don't clone flow post action attributes second time
CVE-2023-542148.8 HIGHBluetooth: L2CAP: Fix potential user-after-free
CVE-2023-541628.8 HIGHksmbd: fix possible memory leak in smb2_lock()
CVE-2023-543188.8 HIGHnet/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add
CVE-2023-542508.2 HIGHksmbd: avoid out of bounds access in decode_preauth_ctxt()
CVE-2023-541648.0 HIGHBluetooth: ISO: fix iso_conn related locking and validity issues
CVE-2023-542067.8 HIGHnet/sched: flower: fix filter idr initialization
CVE-2023-542027.8 HIGHdrm/i915: fix race condition UAF in i915_perf_add_config_ioctl
CVE-2023-542107.8 HIGHBluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor()
CVE-2023-542437.8 HIGHnetfilter: ebtables: fix table blob use-after-free

Showing top 20 of 244 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2023-54205

No comments yet


Leave a comment