CVE-2023-53744

kernel: soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 8, 2025

Updated · June 30, 2026

Description

The TI AM33xx power management driver in the Linux kernel fails to release reference counts acquired via wkup_m3_ipc_get() when errors occur during probe. Since the corresponding wkup_m3_ipc_put() call is missing from error paths, repeated probe failures gradually exhaust kernel resources.

Statement

This affects TI AM335x/AM437x SoC platforms running the pm33xx driver. The bug manifests only under error conditions during power management initialization, making real-world impact unlikely for most deployments.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-911 · Improper Update of Reference Count