CVE-2023-53700

published 2025-10-22

CVE-2023-53700: In the Linux kernel, the following vulnerability has been resolved: media: max9286: Fix memleak in max9286_v4l2_register() There is a kmemleak when testing the…

Priority P4 20

In the Linux kernel, the following vulnerability has been resolved:

media: max9286: Fix memleak in max9286_v4l2_register()

There is a kmemleak when testing the media/i2c/max9286.c with bpf mock
device:

kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak)

unreferenced object 0xffff88810defc400 (size 256):
comm "python3", pid 278, jiffies 4294737563 (age 31.978s)
hex dump (first 32 bytes):
28 06 a7 0a 81 88 ff ff 00 fe 22 12 81 88 ff ff (.........".....
10 c4 ef 0d 81 88 ff ff 10 c4 ef 0d 81 88 ff ff ................
backtrace:
[] __kmalloc_node+0x44/0x1b0
[] kvmalloc_node+0x34/0x180
[] v4l2_ctrl_new+0x325/0x10f0 [videodev]
[] v4l2_ctrl_new_std+0x16f/0x210 [videodev]
[] max9286_probe+0x76e/0xbff [max9286]
[] i2c_device_probe+0x28d/0x680
[] really_probe+0x17c/0x3f0
[] __driver_probe_device+0xe3/0x170
[] driver_probe_device+0x49/0x120
[] __device_attach_driver+0xf7/0x150
[] bus_for_each_drv+0x114/0x180
[] __device_attach+0x1e5/0x2d0
[] bus_probe_device+0x126/0x140
[] device_add+0x810/0x1130
[] i2c_new_client_device+0x359/0x4f0
[] of_i2c_register_device+0xf1/0x110

max9286_v4l2_register() calls v4l2_ctrl_new_std(), but won't free the
created v412_ctrl when fwnode_graph_get_endpoint_by_id() failed, which
causes the memleak. Call v4l2_ctrl_handler_free() to free the v412_ctrl.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.20-1 (bookworm)	linux 6.1.20-1 (bookworm)
linux	linux	—	—
linux	linux	>= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 505ff3a0c5951684c3a43094ca4c1a74683d5681	505ff3a0c5951684c3a43094ca4c1a74683d5681
linux	linux	>= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 5897fe3ebe8252993579e1bee715ebfe5504e052	5897fe3ebe8252993579e1bee715ebfe5504e052
linux	linux	>= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 724039e013b34f46344abdbf8c74e6a65a828327	724039e013b34f46344abdbf8c74e6a65a828327
linux	linux	>= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 5e31213fa017c20ccc989033a5f4a626473aa2ca	5e31213fa017c20ccc989033a5f4a626473aa2ca
linux	linux	>= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 8636c5fc7658c7c6299fb8b352d24ea4b9ba99e2	8636c5fc7658c7c6299fb8b352d24ea4b9ba99e2
linux	linux_kernel	>= 0 < 5.10.178-1	5.10.178-1
linux	linux_kernel	>= 0 < 6.1.20-1	6.1.20-1
linux	linux_kernel	>= 0 < 6.1.20-1	6.1.20-1
linux	linux_kernel	>= 0 < 6.1.20-1	6.1.20-1
linux	linux_kernel	>= 5.11.0 < 5.15.99	5.15.99
linux	linux_kernel	>= 5.16.0 < 6.1.16	6.1.16
linux	linux_kernel	>= 5.9.0 < 5.10.173	5.10.173
linux	linux_kernel	>= 6.2.0 < 6.2.3	6.2.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.