Description
In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2_device on probe failure si476x_radio_probe() registers radio->v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns through the exit label after freeing only the control handler. A failed probe does not call si476x_radio_remove(), so the v4l2_device_unregister() there is not reached. This leaves the parent device reference taken by v4l2_device_register() behind on the error path. Unregister the V4L2 device in the probe error path after freeing the controls.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
b879a9c2a755d4ddf9e685258de6435710fd2f03 to < 828f8d2181aa09ff3d8b67e1d9c92d0dfc81026faffectedb879a9c2a755d4ddf9e685258de6435710fd2f03 to < cac1c4f08cb2d8beaad16f7ddc7911f3711daa9faffectedb879a9c2a755d4ddf9e685258de6435710fd2f03 to < 7cf393f176317a126d71e88e4b6e25e83499b465affectedb879a9c2a755d4ddf9e685258de6435710fd2f03 to < 4ca9c9f12b1bc341a0a3bbbd2090fd182db53771affectedb879a9c2a755d4ddf9e685258de6435710fd2f03 to < 7ef9f1659404544a8dddd68842bafcb4a38197afaffectedb879a9c2a755d4ddf9e685258de6435710fd2f03 to < 64cb15878b35e5574ff4f80a0b613a79e47867baaffectedb879a9c2a755d4ddf9e685258de6435710fd2f03 to < 730c235d7d2c80a401dac56b0f5066c889aa442daffectedb879a9c2a755d4ddf9e685258de6435710fd2f03 to < 436a693af04ffb889aaf87cb69ec1f2b21d3569caffected
Linux Linux
Default version status: affected
3.10affected0 to < 3.10unaffected5.10.265 to ≤ 5.10.*unaffected5.15.216 to ≤ 5.15.*unaffected6.1.183 to ≤ 6.1.*unaffected6.6.148 to ≤ 6.6.*unaffected6.12.101 to ≤ 6.12.*unaffected6.18.42 to ≤ 6.18.*unaffected7.1.6 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/828f8d2181aa09ff3d8b67e1d9c92d0dfc81026f ↗
- https://git.kernel.org/stable/c/cac1c4f08cb2d8beaad16f7ddc7911f3711daa9f ↗
- https://git.kernel.org/stable/c/7cf393f176317a126d71e88e4b6e25e83499b465 ↗
- https://git.kernel.org/stable/c/4ca9c9f12b1bc341a0a3bbbd2090fd182db53771 ↗
- https://git.kernel.org/stable/c/7ef9f1659404544a8dddd68842bafcb4a38197af ↗
- https://git.kernel.org/stable/c/64cb15878b35e5574ff4f80a0b613a79e47867ba ↗
- https://git.kernel.org/stable/c/730c235d7d2c80a401dac56b0f5066c889aa442d ↗
- https://git.kernel.org/stable/c/436a693af04ffb889aaf87cb69ec1f2b21d3569c ↗