Reference Counting Vulnerability in Linux Kernel's IRQ Chip Mechanism

CVE-2023-53610

What is CVE-2023-53610?

A vulnerability has been identified in the Linux kernel that affects the IRQ chip mechanism, specifically during the platform IRQ chip probing process. The issue arises from a missing decrement of the reference count for a node pointer returned by of_irq_find_parent(), which can lead to a leak of memory resources. This flaw can potentially disrupt system stability and efficiency if left unaddressed. Proper cleanup using of_node_put() is essential to mitigate resource leaks in the affected code.

References