cbcvebase.
CVE-2023-53443
published 2025-09-18

CVE-2023-53443: In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak In…

PriorityP416medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.4th percentile
In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak In arizona_clk32k_enable(), we should use pm_runtime_resume_and_get() as pm_runtime_get_sync() will increase the refcnt even when it returns an error.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.20-1 (bookworm)linux 6.1.20-1 (bookworm)
linuxlinux
linuxlinux>= 247fa1920deeb1064e36c0a34410f4d63503b3d4 < 7195e642b49af60d4120fa1b45bd812ba528174f7195e642b49af60d4120fa1b45bd812ba528174f
linuxlinux>= 247fa1920deeb1064e36c0a34410f4d63503b3d4 < 754e81ff44061dda68da0fd4ef51bd1aa9fbf2cf754e81ff44061dda68da0fd4ef51bd1aa9fbf2cf
linuxlinux>= 247fa1920deeb1064e36c0a34410f4d63503b3d4 < 5a47bb71b1a94a279144fc3031d3c4591b38dd165a47bb71b1a94a279144fc3031d3c4591b38dd16
linuxlinux>= 247fa1920deeb1064e36c0a34410f4d63503b3d4 < 9893771097b22a8743a446e45994a177795ca4da9893771097b22a8743a446e45994a177795ca4da
linuxlinux>= 247fa1920deeb1064e36c0a34410f4d63503b3d4 < dc9437e9889c3dacf1f320e3cf08da74127573fedc9437e9889c3dacf1f320e3cf08da74127573fe
linuxlinux>= 247fa1920deeb1064e36c0a34410f4d63503b3d4 < 4414a7ab80cebf715045e3c4d465feefbad211394414a7ab80cebf715045e3c4d465feefbad21139
linuxlinux_kernel< 5.4.2355.4.235
linuxlinux_kernel>= 0 < 5.10.178-15.10.178-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 5.11 < 5.15.1005.15.100
linuxlinux_kernel>= 5.16 < 6.1.186.1.18
linuxlinux_kernel>= 5.5 < 5.10.1735.10.173
linuxlinux_kernel>= 6.2 < 6.2.56.2.5

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.