Description
In the Linux kernel, the following vulnerability has been resolved: media: tegra-video: Fix memory leak in __tegra_channel_try_format() The state object allocated by __v4l2_subdev_state_alloc() must be freed with __v4l2_subdev_state_free() when it is no longer needed. In __tegra_channel_try_format(), two error paths return directly after v4l2_subdev_call() fails, without freeing the allocated 'sd_state' object. This violates the requirement and causes a memory leak. Fix this by introducing a cleanup label and using goto statements in the error paths to ensure that __v4l2_subdev_state_free() is always called before the function returns.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1ebaeb09830f36c1111b72a95420814225bd761c to < 6c6f419fa9c44a4b7149b0292e01bff47308ba14affected1ebaeb09830f36c1111b72a95420814225bd761c to < ca921be7a1174d5d58b28f84b683c2c0079f18c5affected1ebaeb09830f36c1111b72a95420814225bd761c to < 3ca2f09061736e72ef25eec2597d00f7f44094d3affected1ebaeb09830f36c1111b72a95420814225bd761c to < 2dff8966a3a889dd9d248a7e15d963b4097efcc5affected1ebaeb09830f36c1111b72a95420814225bd761c to < d92e9a18f97a1d19d4c2ff81dcfbe43591f75b5aaffected1ebaeb09830f36c1111b72a95420814225bd761c to < 43e5302d22334f1183dec3e0d5d8007eefe2817caffected
Linux Linux
Default version status: affected
5.10affected0 to < 5.10unaffected6.1.167 to ≤ 6.1.*unaffected6.6.130 to ≤ 6.6.*unaffected6.12.77 to ≤ 6.12.*unaffected6.18.17 to ≤ 6.18.*unaffected6.19.6 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/6c6f419fa9c44a4b7149b0292e01bff47308ba14 ↗
- https://git.kernel.org/stable/c/ca921be7a1174d5d58b28f84b683c2c0079f18c5 ↗
- https://git.kernel.org/stable/c/3ca2f09061736e72ef25eec2597d00f7f44094d3 ↗
- https://git.kernel.org/stable/c/2dff8966a3a889dd9d248a7e15d963b4097efcc5 ↗
- https://git.kernel.org/stable/c/d92e9a18f97a1d19d4c2ff81dcfbe43591f75b5a ↗
- https://git.kernel.org/stable/c/43e5302d22334f1183dec3e0d5d8007eefe2817c ↗