-

CVE-2026-68221

media: nuvoton: npcm-video: fix memory leaks in probe and remove

In the Linux kernel, the following vulnerability has been resolved:

media: nuvoton: npcm-video: fix memory leaks in probe and remove

npcm_video_probe() allocates the npcm_video structure with kzalloc_obj()
but never frees it on any probe error path or in npcm_video_remove(),
leaking the allocation on every failed probe and every normal unbind.

Additionally, when npcm_video_setup_video() fails, the reserved memory
association established by of_reserved_mem_device_init() in
npcm_video_init() is not released, leaking the rmem_assigned_device
entry on the global list.

Fix both by adding kfree(video) to all probe error paths and to
npcm_video_remove(), and adding the missing
of_reserved_mem_device_release() call when npcm_video_setup_video()
fails.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 46c15a4ff1f4fe078c5b250fb2570020211eab38
Version < b092d690a9b28795ab2db083023e8a5368cddb22
Status affected
Version 46c15a4ff1f4fe078c5b250fb2570020211eab38
Version < 181a0aeefd56f9285325b84789aa348aba0508bf
Status affected
Version 46c15a4ff1f4fe078c5b250fb2570020211eab38
Version < 65ddc021d39d6383635ee8b0970b2d1c7947e447
Status affected
Version 46c15a4ff1f4fe078c5b250fb2570020211eab38
Version < 50cc0e547da50b887e63dfa1ad203cd5b735d01e
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.7
Status affected
Version 0
Version < 6.7
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.112
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b092d690a9b28795ab2db083023e8a5368cddb22
https://git.kernel.org/stable/c/181a0aeefd56f9285325b84789aa348aba0508bf
https://git.kernel.org/stable/c/65ddc021d39d6383635ee8b0970b2d1c7947e447
https://git.kernel.org/stable/c/50cc0e547da50b887e63dfa1ad203cd5b735d01e