CVE-2023-54078
published 2025-12-24CVE-2023-54078: In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-time error…
PriorityP419
EPSS
0.19%
9.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
media: max9286: Free control handler
The control handler is leaked in some probe-time error paths, as well as
in the remove path. Fix it.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 9a3a907cf69f804eb41ece5c079720d1a6a15aa1 | 9a3a907cf69f804eb41ece5c079720d1a6a15aa1 |
| linux | linux | >= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 1ad4b8c4552b4096dfc86531462dc1899f96af94 | 1ad4b8c4552b4096dfc86531462dc1899f96af94 |
| linux | linux | >= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 1e9fc6c473210138eff3425a6136f0a9bf4eb0ae | 1e9fc6c473210138eff3425a6136f0a9bf4eb0ae |
| linux | linux | >= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 0f25f99dacc72bce7d4128f7a254b23f1a343cc7 | 0f25f99dacc72bce7d4128f7a254b23f1a343cc7 |
| linux | linux | >= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < 19f36204dbe28bf4ec0149e87e9996a56af4e654 | 19f36204dbe28bf4ec0149e87e9996a56af4e654 |
| linux | linux | >= 66d8c9d2422da21ed41f75c03ba0685987b65fe0 < bfce6a12e5ba1edde95126aa06778027f16115d4 | bfce6a12e5ba1edde95126aa06778027f16115d4 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 5.11.0 < 5.15.111 | 5.15.111 |
| linux | linux_kernel | >= 5.16.0 < 6.1.28 | 6.1.28 |
| linux | linux_kernel | >= 5.9.0 < 5.10.180 | 5.10.180 |
| linux | linux_kernel | >= 6.2.0 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3.0 < 6.3.2 | 6.3.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: media: max9286: Free control handler
vendor_redhat·2025-12-24
CVE-2023-54078 kernel: media: max9286: Free control handler
kernel: media: max9286: Free control handler
In the Linux kernel, the following vulnerability has been resolved:
media: max9286: Free control handler
The control handler is leaked in some probe-time error paths, as well as
in the remove path. Fix it.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Not affected
Debian
CVE-2023-54078: linux - In the Linux kernel, the following vulnerability has been resolved: media: max9...
vendor_debian·2023
CVE-2023-54078 CVE-2023-54078: linux - In the Linux kernel, the following vulnerability has been resolved: media: max9...
In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-time error paths, as well as in the remove path. Fix it.
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
GHSA
GHSA-52mg-2vv9-gfff: In the Linux kernel, the following vulnerability has been resolved:
media: max9286: Free control handler
The control handler is leaked in some probe
ghsa_unreviewed·2025-12-24
CVE-2023-54078 GHSA-52mg-2vv9-gfff: In the Linux kernel, the following vulnerability has been resolved:
media: max9286: Free control handler
The control handler is leaked in some probe
In the Linux kernel, the following vulnerability has been resolved:
media: max9286: Free control handler
The control handler is leaked in some probe-time error paths, as well as
in the remove path. Fix it.
OSV
CVE-2023-54078: In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-t
osv·2025-12-24
CVE-2023-54078 CVE-2023-54078: In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-t
In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-time error paths, as well as in the remove path. Fix it.
OSV
media: max9286: Free control handler
osv·2025-12-24
CVE-2023-54078 media: max9286: Free control handler
media: max9286: Free control handler
In the Linux kernel, the following vulnerability has been resolved:
media: max9286: Free control handler
The control handler is leaked in some probe-time error paths, as well as
in the remove path. Fix it.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54078 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54078 CVE-2023-54078 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54078 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
media: max9286: Free control handler
The control handler is leaked in some probe-time error paths, as well as
in the remove path. Fix it.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
kernel-source-rt
kernel-64kb-devel
Sources
NVD
Debian 11, 12, 13, 14 Has Fix Added at: Dec 26, 2025
Echo Has Fix Added at: Dec 26, 2025
Ubuntu 16.04, 18.04 Severity MEDIUM No Fix Added a
Bugzilla
CVE-2023-54078 kernel: media: max9286: Free control handler
bugzilla·2025-12-24
CVE-2023-54078 CVE-2023-54078 kernel: media: max9286: Free control handler
CVE-2023-54078 kernel: media: max9286: Free control handler
In the Linux kernel, the following vulnerability has been resolved:
media: max9286: Free control handler
The control handler is leaked in some probe-time error paths, as well as
in the remove path. Fix it.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122402-CVE-2023-54078-03f3@gregkh/T
https://git.kernel.org/stable/c/0f25f99dacc72bce7d4128f7a254b23f1a343cc7https://git.kernel.org/stable/c/19f36204dbe28bf4ec0149e87e9996a56af4e654https://git.kernel.org/stable/c/1ad4b8c4552b4096dfc86531462dc1899f96af94https://git.kernel.org/stable/c/1e9fc6c473210138eff3425a6136f0a9bf4eb0aehttps://git.kernel.org/stable/c/9a3a907cf69f804eb41ece5c079720d1a6a15aa1https://git.kernel.org/stable/c/bfce6a12e5ba1edde95126aa06778027f16115d4
2025-12-24
Published