CVE-2023-53579: 
Linux Kernel vulnerability analysis and mitigation

A resource leak vulnerability was identified in the Linux kernel's mvebu GPIO driver (CVE-2023-53579). The issue was discovered by Uwe Kleine-König and occurs during driver detach operations. The vulnerability was disclosed on October 4, 2025 (NVD).

The vulnerability is specifically related to an IRQ domain leak in the mvebu GPIO driver that manifests during driver detach operations. The issue requires a custom devm action to properly address the resource management problem (Red Hat). Red Hat has assigned this vulnerability a CVSS v3.1 base score of 5.5 with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

The vulnerability affects resource management in the Linux kernel's GPIO subsystem, specifically impacting systems using the mvebu driver. The issue has been rated as having moderate severity, with potential impacts primarily focused on resource availability (Red Hat).

Fixed versions have been released for various Linux distributions. Debian has addressed this in version 6.1.52-1 for bookworm and 6.4.11-1 for unstable releases (Debian). Red Hat has confirmed that several of their Enterprise Linux versions, including RHEL 6, 7, 8, and 9, are not affected by this vulnerability (Red Hat).