media: uvcvideo: Fix memory leak in uvc_gpio_parse (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.20 % · percentile 10 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it. Addresses-Coverity-ID: 1474639 ("Resource leak")
References
European references
- ENISA EUVD · EUVD-2022-55914
- GCVE · GCVE-0-2022-50882
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < 6c5da92103bddd1f0c36cb69446ff7cae3043986 ; affected 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < deb8f32ae4b10a48c433f2da1b1159521ac24674 ; affected 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < 4a7ae8d982a89b3b43b36ec7d62a2e3d06ffa16e ; affected 2886477ff98740cc3333cf785e4de0b1ff3d7a28 < f0f078457f18f10696888f8d0e6aba9deb9cde92 |
| Linux · Linux | affected 5.12 ; unaffected 0 < 5.12 ; unaffected 5.15.75 ≤ 5.15.* ; unaffected 5.19.17 ≤ 5.19.* ; unaffected 6.0.3 ≤ 6.0.* ; unaffected 6.1 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |