Refcount Leak in Linux Kernel's mvebu_gicp Module

CVE-2023-53757

What is CVE-2023-53757?

A vulnerability has been identified in the Linux kernel's mvebu_gicp module, which involves a refcount leak. The issue arises when the function of_irq_find_parent() returns a node pointer with an incremented reference count. If this reference is not released properly, it can lead to memory management issues, potentially causing instability in the kernel. The addition of the of_node_put() function resolves this leak, ensuring appropriate memory handling and enhanced system reliability.

References