-

CVE-2023-54183

media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL,
so fwnode_handle_put() is a no-op.

Release the reference taken from a previous fwnode_graph_get_port_parent()
call instead.

Also handle fwnode_graph_get_port_parent() failures.

In order to fix these issues, add an error handling path to the function
and the needed gotos.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ca50c197bd9610ea984cfc0dc6855f183cbb46f8
Version < 2342942331e1f034ff58f293e10d0d9b7581601f
Status affected
Version ca50c197bd9610ea984cfc0dc6855f183cbb46f8
Version < 4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877
Status affected
Version ca50c197bd9610ea984cfc0dc6855f183cbb46f8
Version < d8a8f75fce049bdb3144b607deefe51e996b9660
Status affected
Version ca50c197bd9610ea984cfc0dc6855f183cbb46f8
Version < caf058833b6f3fe7beabf738110f79bb987c8fff
Status affected
Version ca50c197bd9610ea984cfc0dc6855f183cbb46f8
Version < 25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8
Status affected
Version ca50c197bd9610ea984cfc0dc6855f183cbb46f8
Version < ed1696f7f92e8404940d51dec80a123aa18163a8
Status affected
Version ca50c197bd9610ea984cfc0dc6855f183cbb46f8
Version < e8a1cd87bb9fa3149ee112ecb8058908dc9b520e
Status affected
Version ca50c197bd9610ea984cfc0dc6855f183cbb46f8
Version < d7b13edd4cb4bfa335b6008ab867ac28582d3e5c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.13
Status affected
Version 0
Version < 4.13
Status unaffected
Version <= 4.19.*
Version 4.19.295
Status unaffected
Version <= 5.4.*
Version 5.4.257
Status unaffected
Version <= 5.10.*
Version 5.10.195
Status unaffected
Version <= 5.15.*
Version 5.15.132
Status unaffected
Version <= 6.1.*
Version 6.1.53
Status unaffected
Version <= 6.4.*
Version 6.4.16
Status unaffected
Version <= 6.5.*
Version 6.5.3
Status unaffected
Version <= *
Version 6.6
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.144
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.