CVE-2023-53592: 
Linux Kernel vulnerability analysis and mitigation

A refcount leak vulnerability was discovered in the Linux kernel's SiFive GPIO driver. The issue occurs in the sifive_gpio_probe function where of_irq_find_parent() returns a node pointer with an incremented reference count, but the code fails to properly release this reference count using of_node_put() when it's no longer needed (NVD, Debian Tracker).

The vulnerability exists in the Linux kernel's GPIO subsystem, specifically in the SiFive GPIO driver. The issue stems from a missing of_node_put() call after of_irq_find_parent() is used, which returns a node pointer with an incremented reference count. This oversight leads to a reference count leak in the sifive_gpio_probe function (NVD).

The reference count leak could potentially lead to memory management issues in the kernel. While the immediate impact appears to be limited to resource management, continued leaks could potentially affect system stability over time (NVD).

The vulnerability has been fixed in various Linux distributions. Debian has addressed this in multiple versions including bullseye (5.10.244-1), bookworm (6.1.153-1), trixie (6.12.48-1), and sid (6.16.12-2). Users should update their systems to the patched versions (Debian Tracker).