CVE-2023-54208
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
30/12/2025
Última modificación:
31/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: ov5675: Fix memleak in ov5675_init_controls()<br />
<br />
There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock<br />
device:<br />
<br />
AssertionError: unreferenced object 0xffff888107362160 (size 16):<br />
comm "python3", pid 277, jiffies 4294832798 (age 20.722s)<br />
hex dump (first 16 bytes):<br />
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br />
backtrace:<br />
[] __kmalloc_node+0x44/0x1b0<br />
[] kvmalloc_node+0x34/0x180<br />
[] v4l2_ctrl_handler_init_class+0x11d/0x180<br />
[videodev]<br />
[] ov5675_probe+0x38b/0x897 [ov5675]<br />
[] i2c_device_probe+0x28d/0x680<br />
[] really_probe+0x17c/0x3f0<br />
[] __driver_probe_device+0xe3/0x170<br />
[] driver_probe_device+0x49/0x120<br />
[] __device_attach_driver+0xf7/0x150<br />
[] bus_for_each_drv+0x114/0x180<br />
[] __device_attach+0x1e5/0x2d0<br />
[] bus_probe_device+0x126/0x140<br />
[] device_add+0x810/0x1130<br />
[] i2c_new_client_device+0x386/0x540<br />
[] of_i2c_register_device+0xf1/0x110<br />
[] of_i2c_notify+0xfc/0x1f0<br />
<br />
ov5675_init_controls() won&#39;t clean all the allocated resources in fail<br />
path, which may causes the memleaks. Add v4l2_ctrl_handler_free() to<br />
prevent memleak.
Impacto
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/086a80b842bcb621d6c4eedad20683f1f674d0c2
- https://git.kernel.org/stable/c/49b849824b9862f177fc77fc92ef95ec54566ecf
- https://git.kernel.org/stable/c/7a36a6be694df87d019663863b922913947b42af
- https://git.kernel.org/stable/c/ba54908ae8225d58f1830edb394d4153bcb7d0aa
- https://git.kernel.org/stable/c/bcae9115a163198dce9126aa8bedc1c007ec30ed
- https://git.kernel.org/stable/c/dd74ed6c213003533e3abf4c204374ef01d86978



