SB2025100444 - Memory leak in Linux kernel gpio driver
Published: October 4, 2025 Updated: October 27, 2025
Security Bulletin ID
SB2025100444
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2023-53592)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the sifive_gpio_probe() function in drivers/gpio/gpio-sifive.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/694175cd8a1643cde3acb45c9294bca44a8e08e9
- https://git.kernel.org/stable/c/95da1882ce9372ba20278f87cdb7a34f9812c4b5
- https://git.kernel.org/stable/c/9a402a210798662b04cbe6ca466e916a15efa03a
- https://git.kernel.org/stable/c/f4a2ad1002006548e235255c65a4f1d07312be9d
- https://git.kernel.org/stable/c/f9fb4776ebbc16dfc512adbdc0fe218acb47c7cc
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.19