CVE-2023-53349

media: ov2740: Fix memleak in ov2740_init_controls()

State: Published
Severity: 5.5 Medium
Published: Sep 17, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: ov2740: Fix memleak in ov2740_init_controls()

There is a kmemleak when testing the media/i2c/ov2740.c with bpf mock device:

unreferenced object 0xffff8881090e19e0 (size 16): comm "51-i2c-ov2740", pid 278, jiffies 4294781584 (age 23.613s) hex dump (first 16 bytes): 00 f3 7c 0b 81 88 ff ff 80 75 6a 09 81 88 ff ff ..|......uj..... backtrace: [<000000004e9fad8f>] __kmalloc_node+0x44/0x1b0 [<0000000039c802f4>] kvmalloc_node+0x34/0x180 [<000000009b8b5c63>] v4l2_ctrl_handler_init_class+0x11d/0x180 [videodev] [<0000000038644056>] ov2740_probe+0x37d/0x84f [ov2740] [<0000000092489f59>] i2c_device_probe+0x28d/0x680 [<000000001038babe>] really_probe+0x17c/0x3f0 [<0000000098c7af1c>] __driver_probe_device+0xe3/0x170 [<00000000e1b3dc24>] device_driver_attach+0x34/0x80 [<000000005a04a34d>] bind_store+0x10b/0x1a0 [<00000000ce25d4f2>] drv_attr_store+0x49/0x70 [<000000007d9f4e9a>] sysfs_kf_write+0x8c/0xb0 [<00000000be6cff0f>] kernfs_fop_write_iter+0x216/0x2e0 [<0000000031ddb40a>] vfs_write+0x658/0x810 [<0000000041beecdd>] ksys_write+0xd6/0x1b0 [<0000000023755840>] do_syscall_64+0x38/0x90 [<00000000b2cc2da2>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

ov2740_init_controls() won't clean all the allocated resources in fail path, which may causes the memleaks. Add v4l2_ctrl_handler_free() to prevent memleak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	866edc895171f1256aad3e81dce193447955c202 to before a163ee11345d8322321c28bd61631de32455b987Affected 866edc895171f1256aad3e81dce193447955c202 to before 3969b2ebc66039306f505c7c630c5530800f83c0Affected 866edc895171f1256aad3e81dce193447955c202 to before fc33380ae06f438b652f66b9370b543976ac8a03Affected 866edc895171f1256aad3e81dce193447955c202 to before 7c405ee63447f14eefcfe12a18aa749abbd596eaAffected 866edc895171f1256aad3e81dce193447955c202 to before 2d899592ed7829d0d5140853bac4d58742a6b8afAffected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

866edc895171f1256aad3e81dce193447955c202 to before a163ee11345d8322321c28bd61631de32455b987Affected
866edc895171f1256aad3e81dce193447955c202 to before 3969b2ebc66039306f505c7c630c5530800f83c0Affected
866edc895171f1256aad3e81dce193447955c202 to before fc33380ae06f438b652f66b9370b543976ac8a03Affected
866edc895171f1256aad3e81dce193447955c202 to before 7c405ee63447f14eefcfe12a18aa749abbd596eaAffected
866edc895171f1256aad3e81dce193447955c202 to before 2d899592ed7829d0d5140853bac4d58742a6b8afAffected

LinuxLinux

5.8Affected
before 5.8Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.