-

CVE-2026-93071

media: bcm2835-unicam: Fix asc leaked in error/remove path

In the Linux kernel, the following vulnerability has been resolved:

media: bcm2835-unicam: Fix asc leaked in error/remove path

v4l2_async_nf_add_fwnode_remote() allocates the asc, which is freed when
v4l2_async_nf_cleanup() is called.

Call v4l2_async_nf_cleanup() properly in the driver paths.

Discovered with kmemleak after rmmod:

unreferenced object 0xffff000084526b80 (size 64):
  comm "modprobe", pid 185, jiffies 4295013512
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 e8 0d ff bf 00 00 ff ff  ................
    40 83 bc 84 00 00 ff ff 60 83 bc 84 00 00 ff ff  @.......`.......
  backtrace (crc ac584083):
    [<00000000ffb081a7>] kmemleak_alloc+0x38/0x44
    [<00000000d2fd9301>] __kmalloc+0x1b0/0x250
    [<000000004dd5354d>] __v4l2_async_nf_add_fwnode+0x28/0x9c
    [<0000000067587657>] __v4l2_async_nf_add_fwnode_remote+0x3c/0x64
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 392cd78d495f36c201eb5cc425b01017d493e094
Version < 5479372db364c80bb6bd59f640f5c31de3984bab
Status affected
Version 392cd78d495f36c201eb5cc425b01017d493e094
Version < 2c29cd408ef86e695acb2a5d4e00fa2f5695368d
Status affected
Version 392cd78d495f36c201eb5cc425b01017d493e094
Version < de9be39cefda1ecd762e6a913665c01f7bb18100
Status affected
Version 392cd78d495f36c201eb5cc425b01017d493e094
Version < 253c9659e25131b0169f718e7d094ac1aa0d9279
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.10
Status affected
Version 0
Version < 6.10
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.065
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5479372db364c80bb6bd59f640f5c31de3984bab
https://git.kernel.org/stable/c/2c29cd408ef86e695acb2a5d4e00fa2f5695368d
https://git.kernel.org/stable/c/de9be39cefda1ecd762e6a913665c01f7bb18100
https://git.kernel.org/stable/c/253c9659e25131b0169f718e7d094ac1aa0d9279