PT-2025-49678 · Arm+1 · Zynq+1

Published 2025-12-09 · Updated 2026-02-24 · CVE-2023-53818

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak exists in the zynq early slcr init function within the ARM Zynq component of the Linux kernel. The of find compatible node() function increments the reference count of a node pointer, and a missing call to of node put() on the error path leads to a reference count leak. This occurs because the reference count is not decremented when an error occurs, resulting in memory not being properly freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53818

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

Zynq

References · 979

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53818.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-53818 · Security Note
• https://ubuntu.com/security/CVE-2023-53818 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53818 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53818 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53818 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53818 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53818 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53818 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note