CVE-2023-53579
gpio: mvebu: fix irq domain leak
MEDIUM
5.5
CVSS Score
Published: October 4, 2025 at 03:17 PM UTC
Updated: June 17, 2026 at 06:45 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
Description
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-König pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≥ 3.16.40v ≥ 4.8.93.16.40 ≤ v < 3.174.8.9 ≤ v < 4.94.9 ≤ v < 5.15.1244.9 ≤ v < 6.1.434.9 ≤ v < 6.4.84.9 ≤ v < 6.54.9.1 ≤ v < 5.15.1245.16 ≤ v < 6.1.436.2 ≤ v < 6.4.83.16.404.8.94.94.9 rc44.9 rc54.9 rc64.9 rc74.9 rc86.5 rc16.5 rc27a9239fd04802ee6ddf82d211cff3ee7df9c473a812d47889a8e418d7bea9bec383581a34c19183ef0cde54863da281cec1ed85497b4ec58d29c1460
Vendor states this is fixed in 44e2afbf650f3264519643fcc9e6b4d2f6e8d547 (fixed)
Vendor states this is fixed in 644ee70267a934be27370f9aa618b29af7290544 (fixed)
Vendor states this is fixed in b19e90521286a03bc3793fd598f20277a8f99c85 (fixed)
Vendor states this is fixed in d9b791d8362359d241b4e8f4b4767c681ffdb6ef (fixed)
Affected range stops below 3.17, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 4.9 (unaffected)
Vendor states this is fixed in 5.15.124 (unaffected)
Vendor states this is fixed in 6.1.43 (unaffected)
Vendor states this is fixed in 6.4.8 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-401
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card