CVE-2023-54208

Not scored yetLast modified Oct 28, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: ov5675: Fix memleak in ov5675_init_controls()

There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device:

AssertionError: unreferenced object 0xffff888107362160 (size 16): comm "python3", pid 277, jiffies 4294832798 (age 20.722s) hex dump (first 16 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000abe7d67c>] __kmalloc_node+0x44/0x1b0 [<000000008a725aac>] kvmalloc_node+0x34/0x180 [<000000009a53cd11>] v4l2_ctrl_handler_init_class+0x11d/0x180 [videodev] [<0000000055b46db0>] ov5675_probe+0x38b/0x897 [ov5675] [<00000000153d886c>] i2c_device_probe+0x28d/0x680 [<000000004afb7e8f>] really_probe+0x17c/0x3f0 [<00000000ff2f18e4>] __driver_probe_device+0xe3/0x170 [<000000000a001029>] driver_probe_device+0x49/0x120 [<00000000e39743c7>] __device_attach_driver+0xf7/0x150 [<00000000d32fd070>] bus_for_each_drv+0x114/0x180 [<000000009083ac41>] __device_attach+0x1e5/0x2d0 [<0000000015b4a830>] bus_probe_device+0x126/0x140 [<000000007813deaf>] device_add+0x810/0x1130 [<000000007becb867>] i2c_new_client_device+0x386/0x540 [<000000007f9cf4b4>] of_i2c_register_device+0xf1/0x110 [<00000000ebfdd032>] of_i2c_notify+0xfc/0x1f0

ov5675_init_controls() won't clean all the allocated resources in fail path, which may causes the memleaks. Add v4l2_ctrl_handler_free() to prevent memleak.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= bf27502b1f3bf8095bf81736e506d354a2ce9ec4, < 086a80b842bcb621d6c4eedad20683f1f674d0c2; >= bf27502b1f3bf8095bf81736e506d354a2ce9ec4, < bcae9115a163198dce9126aa8bedc1c007ec30ed; >= bf27502b1f3bf8095bf81736e506d354a2ce9ec4, < ba54908ae8225d58f1830edb394d4153bcb7d0aa; >= bf27502b1f3bf8095bf81736e506d354a2ce9ec4, < 49b849824b9862f177fc77fc92ef95ec54566ecf; >= bf27502b1f3bf8095bf81736e506d354a2ce9ec4, < 7a36a6be694df87d019663863b922913947b42af; >= bf27502b1f3bf8095bf81736e506d354a2ce9ec4, < dd74ed6c213003533e3abf4c204374ef01d86978
LinuxLinux5.4

References

Timeline

Published
Dec 30, 2025
Last modified
Oct 28, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54209In the Linux kernel, the following vulnerability has been resolved: block: fix blktrace debugfs entries leakage Commit 99d055b4fd4b ("blocCVE-2023-54215.5An attacker who is logged into OTRS as an user with privileges to create and change customer user data may manipulate the CustomerID field tCVE-2023-542107.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monCVE-2023-54211In the Linux kernel, the following vulnerability has been resolved: tracing: Fix warning in trace_buffered_event_disable() Warning happeneCVE-2023-54213In the Linux kernel, the following vulnerability has been resolved: USB: sisusbvga: Add endpoint checks The syzbot fuzzer was able to provCVE-2023-542148.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instancCVE-2023-54215In the Linux kernel, the following vulnerability has been resolved: virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs() Free thCVE-2023-542167.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix using eswitch mapping in nic mode Cited patch is usCVE-2023-54217In the Linux kernel, the following vulnerability has been resolved: Revert "drm/msm: Add missing check and destroy for alloc_ordered_workquCVE-2023-54218In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). KCSAN founCVE-2023-542197.5In the Linux kernel, the following vulnerability has been resolved: Revert "IB/isert: Fix incorrect release of isert connection" Commit: 6CVE-2023-54229.1The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As
CVE-2023-54208: Unscored | Vulnix