Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-54183

media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

Description

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL, so fwnode_handle_put() is a no-op. Release the reference taken from a previous fwnode_graph_get_port_parent() call instead. Also handle fwnode_graph_get_port_parent() failures. In order to fix these issues, add an error handling path to the function and the needed gotos.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to < 2342942331e1f034ff58f293e10d0d9b7581601faffected
  • ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to < 4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877affected
  • ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to < d8a8f75fce049bdb3144b607deefe51e996b9660affected
  • ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to < caf058833b6f3fe7beabf738110f79bb987c8fffaffected
  • ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to < 25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8affected
  • ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to < ed1696f7f92e8404940d51dec80a123aa18163a8affected
  • ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to < e8a1cd87bb9fa3149ee112ecb8058908dc9b520eaffected
  • ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to < d7b13edd4cb4bfa335b6008ab867ac28582d3e5caffected

Linux Linux

Default version status: affected

  • 4.13affected
  • 0 to < 4.13unaffected
  • 4.19.295 to ≤ 4.19.*unaffected
  • 5.4.257 to ≤ 5.4.*unaffected
  • 5.10.195 to ≤ 5.10.*unaffected
  • 5.15.132 to ≤ 5.15.*unaffected
  • 6.1.53 to ≤ 6.1.*unaffected
  • 6.4.16 to ≤ 6.4.*unaffected
  • 6.5.3 to ≤ 6.5.*unaffected
  • 6.6 to ≤ *unaffected

References