media: uvcvideo: Fix memory leak in uvc_gpio_parse (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.20 % · centile 10 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it. Addresses-Coverity-ID: 1474639 ("Resource leak")
Références
Références européennes
- ENISA EUVD · EUVD-2022-55914
- GCVE · GCVE-0-2022-50882
Avis du CERT-FR
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < 6c5da92103bddd1f0c36cb69446ff7cae3043986 ; affected 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < deb8f32ae4b10a48c433f2da1b1159521ac24674 ; affected 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < 4a7ae8d982a89b3b43b36ec7d62a2e3d06ffa16e ; affected 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < f0f078457f18f10696888f8d0e6aba9deb9cde92 |
| Linux · Linux | affected 5.12 ; unaffected 0 < 5.12 ; unaffected 5.15.75 ≤ 5.15.* ; unaffected 5.19.17 ≤ 5.19.* ; unaffected 6.0.3 ≤ 6.0.* ; unaffected 6.1 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |