CVE-2023-54183: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
In the Linux kernel, the following vulnerability has been resolved:
media: v4l2-core: Fix a potential resource leak in v4l2fwnodeparselink()
If fwnodegraphgetremoteendpoint() fails, 'fwnode' is known to be NULL, so fwnodehandleput() is a no-op.
Release the reference taken from a previous fwnodegraphgetportparent() call instead.
Also handle fwnodegraphgetportparent() failures.
In order to fix these issues, add an error handling path to the function and the needed gotos.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54183?
The severity of CVE-2023-54183 is rated at risk level 16.
How do I fix CVE-2023-54183?
To fix CVE-2023-54183, update the Linux kernel to the latest version where the vulnerability has been patched.
What does CVE-2023-54183 affect?
CVE-2023-54183 affects the v4l2-core component of the Linux kernel.
What type of vulnerability is CVE-2023-54183?
CVE-2023-54183 is a resource leak vulnerability in the v4l2_fwnode_parse_link() function.
Was CVE-2023-54183 already resolved?
Yes, CVE-2023-54183 has been resolved in a recent patch for the Linux kernel.