CVE-2023-53191: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53191 is a vulnerability discovered in the Linux kernel, specifically in the irqchip/alpine-msi component. The issue was disclosed on September 15, 2025, and involves a refcount leak in the alpinemsixinit_domains function. The vulnerability affects various Linux kernel versions across different distributions (NVD, Ubuntu).

The vulnerability occurs when ofirqfindparent() returns a node pointer with refcount incremented. The issue stems from a missing ofnode_put() call, which should be used when the node pointer is no longer needed, resulting in a reference count leak (NVD).

The refcount leak in the kernel's interrupt handling component could potentially lead to resource exhaustion over time, though the specific impact severity has not been fully assessed as the CVSS scores were not yet provided at the time of disclosure (NVD).

The vulnerability has been patched in various Linux distributions. Ubuntu has released fixes for multiple versions: Ubuntu 22.04 LTS (5.15.0-75.82), Ubuntu 20.04 LTS (5.4.0-152.169), and several other kernel variants including linux-aws, linux-azure, and linux-gcp (Ubuntu).