CVE-2023-53385

media: mdp3: Fix resource leaks in of_find_device_by_node

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: mdp3: Fix resource leaks in of_find_device_by_node

Use put_device to release the object get through of_find_device_by_node, avoiding resource leaks.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before 8ba9d91c8f21f070af2049f114c206a8f2d5c71eAffected 61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before fa481125bc4ca8edc1a4c62fe53486ac9a817593Affected 61890ccaefaff89f5babd2c8412fd222c3f5fe38 to before 35ca8ce495366909b4c2e701d1356570dd40c4e2Affected
LinuxLinux	6.1Affected before 6.1Not affected 6.1.55 through 6.1.Not affected 6.5.5 through 6.5.Not affected 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.