Description
In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isys_notifier_init() calls v4l2_async_nf_init() and then adds fwnode remote subdevs in a loop with v4l2_async_nf_add_fwnode_remote(). If an endpoint parse or add fails partway through the loop, it jumps to err_parse and returns without calling v4l2_async_nf_cleanup(), leaking every v4l2_async_connection already added to the notifier's waiting list. The register-failure path just below already cleans up correctly, and the caller only tears the notifier down (isys_notifier_cleanup()) once isys_notifier_init() has returned success. Clean up the notifier on the parse error path too.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f50c4ca0a82003b8a542c3332fd292cf1bc355a2 to < dd5943aedbe4d7eb46158cb35078257733ac48b6affectedf50c4ca0a82003b8a542c3332fd292cf1bc355a2 to < 27b7997be552ee37b3e01beacfeb4131f1bebb5faffectedf50c4ca0a82003b8a542c3332fd292cf1bc355a2 to < eee6069e4e9511e814a33a75e403f7e863f70394affectedf50c4ca0a82003b8a542c3332fd292cf1bc355a2 to < abb1f808ceab5a3275f8a6b4e37cff17f9f781c1affected
Linux Linux
Default version status: affected
6.10affected0 to < 6.10unaffected6.12.110 to ≤ 6.12.*unaffected6.18.51 to ≤ 6.18.*unaffected7.2.5 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected