CVE-2023-53533

low-risk
Published 2025-10-04

In the Linux kernel, the following vulnerability has been resolved: Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe rpi_firmware_get() take reference, we need to release it in error paths as well. Use devm_rpi_firmware_get() helper to handling the resources. Also remove the existing rpi_firmware_put().

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (7)

Patch https://git.kernel.org/stable/c/0d6a5c9489c8a3d434e685066119c4333476dccd
Patch https://git.kernel.org/stable/c/1dfa3c9dd27bdc347733d06e980395768520bc3e
Patch https://git.kernel.org/stable/c/36d087e49dabd28d2c13a7532dac72d625ce69fb
Patch https://git.kernel.org/stable/c/5bca3688bdbc3b58a2894b8671a8e2378efe28bd
Patch https://git.kernel.org/stable/c/7acad58049acc6ac148e8b613a6eceeca4bcb4a7
Patch https://git.kernel.org/stable/c/9216aa5cfd86809a2681be3683cd9ac30432de0c
Patch https://git.kernel.org/stable/c/9dbbe9db224c23a60dc7b1e00c701be93328c873
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal