PT-2025-54019 · Linux · Linux Kernel

Published 2025-12-30 · Updated 2026-05-26 · CVE-2023-54190

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak exists in the of led get() function within the leds subsystem of the Linux kernel. The class find device by of node() function calls class find device(), which takes a reference and then uses put device() to release it when no longer needed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54190

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 977

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54190.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54190 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54190 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-54190 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54190 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2023-54190 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54190 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54190 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54190 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54190 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54190 · Vendor Advisory