CVE-2023-54183

media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

N/A

Published: December 30, 2025 at 12:08 PM UTC

Updated: June 17, 2026 at 06:46 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL, so fwnode_handle_put() is a no-op. Release the reference taken from a previous fwnode_graph_get_port_parent() call instead. Also handle fwnode_graph_get_port_parent() failures. In order to fix these issues, add an error handling path to the function and the needed gotos.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.13 ≤ v < 4.19.2954.13 ≤ v < 5.10.1954.13 ≤ v < 5.15.1324.13 ≤ v < 5.4.2574.13 ≤ v < 6.1.534.13 ≤ v < 6.4.164.13 ≤ v < 6.5.34.13 ≤ v < 6.64.13ca50c197bd9610ea984cfc0dc6855f183cbb46f8

Vendor states this is fixed in 2342942331e1f034ff58f293e10d0d9b7581601f (fixed)

Vendor states this is fixed in 25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8 (fixed)

Vendor states this is fixed in 4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877 (fixed)

Vendor states this is fixed in caf058833b6f3fe7beabf738110f79bb987c8fff (fixed)

Vendor states this is fixed in d7b13edd4cb4bfa335b6008ab867ac28582d3e5c (fixed)

Vendor states this is fixed in d8a8f75fce049bdb3144b607deefe51e996b9660 (fixed)

Vendor states this is fixed in e8a1cd87bb9fa3149ee112ecb8058908dc9b520e (fixed)

Vendor states this is fixed in ed1696f7f92e8404940d51dec80a123aa18163a8 (fixed)

Vendor states this is fixed in 4.13 (unaffected)

Vendor states this is fixed in 4.19.295 (unaffected)

Vendor states this is fixed in 5.10.195 (unaffected)

Vendor states this is fixed in 5.15.132 (unaffected)