PT-2025-49487 · Linux · Linux Kernel

CVE-2023-53757 · Published 2023-02-02 · Updated 2025-12-09

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a reference count leak in the mvebu gicp probe function within the irqchip/irq-mvebu-gicp component. The of irq find parent() function increments the reference count of a node pointer, and a missing call to of node put() prevents decrementing this count when it is no longer needed, leading to a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

CWE-664

Related Identifiers

BDU:2026-10420

CVE-2023-53757

Affected Products

Linux Kernel

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53757.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-53757 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53757 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-10420 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53757 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53757 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53757 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53757 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53757 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53757 · Vendor Advisory
• https://t.me/CVEtracker/39066 · Telegram Post
• https://git.kernel.org/stable/c/bb755e020abc24793b9411c9419ed43f07f9a03d · Note
• https://git.kernel.org/linus/9419e700021a393f67be36abd0c4f3acc6139041 · Note
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.308 · Note
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.276 · Note