CVE-2023-54183

media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

State: Published
Severity: Not scored
Published: Dec 30, 2025
Updated: May 11, 2026
Reserved: Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL, so fwnode_handle_put() is a no-op.

Release the reference taken from a previous fwnode_graph_get_port_parent() call instead.

Also handle fwnode_graph_get_port_parent() failures.

In order to fix these issues, add an error handling path to the function and the needed gotos.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before 2342942331e1f034ff58f293e10d0d9b7581601fAffected ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before 4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877Affected ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before d8a8f75fce049bdb3144b607deefe51e996b9660Affected ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before caf058833b6f3fe7beabf738110f79bb987c8fffAffected ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before 25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8Affected ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before ed1696f7f92e8404940d51dec80a123aa18163a8Affected ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before e8a1cd87bb9fa3149ee112ecb8058908dc9b520eAffected ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before d7b13edd4cb4bfa335b6008ab867ac28582d3e5cAffected
LinuxLinux	4.13Affected before 4.13Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.*Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before 2342942331e1f034ff58f293e10d0d9b7581601fAffected
ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before 4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877Affected
ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before d8a8f75fce049bdb3144b607deefe51e996b9660Affected
ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before caf058833b6f3fe7beabf738110f79bb987c8fffAffected
ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before 25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8Affected
ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before ed1696f7f92e8404940d51dec80a123aa18163a8Affected
ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before e8a1cd87bb9fa3149ee112ecb8058908dc9b520eAffected
ca50c197bd9610ea984cfc0dc6855f183cbb46f8 to before d7b13edd4cb4bfa335b6008ab867ac28582d3e5cAffected

LinuxLinux

4.13Affected
before 4.13Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.