<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 22:38:30 +0000</lastBuildDate>
    <item>
      <title>CVE-2023-53349 — media: ov2740: Fix memleak in ov2740_init_controls()</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2023-53349</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;media: ov2740: Fix memleak in ov2740_init_controls()&lt;/p&gt;
&lt;p&gt;There is a kmemleak when testing the media/i2c/ov2740.c with bpf mock
device:&lt;/p&gt;
&lt;p&gt;unreferenced object 0xffff8881090e19e0 (size 16):
  comm &amp;#34;51-i2c-ov2740&amp;#34;, pid 278, jiffies 4294781584 (age 23.613s)
  hex dump (first 16 bytes):
    00 f3 7c 0b 81 88 ff ff 80 75 6a 09 81 88 ff ff  ..|......uj.....
  backtrace:
    [&amp;lt;000000004e9fad8f&amp;gt;] __kmalloc_node+0x44/0x1b0
    [&amp;lt;0000000039c802f4&amp;gt;] kvmalloc_node+0x34/0x180
    [&amp;lt;000000009b8b5c63&amp;gt;] v4l2_ctrl_handler_init_class+0x11d/0x180
[videodev]
    [&amp;lt;0000000038644056&amp;gt;] ov2740_probe+0x37d/0x84f [ov2740]
    [&amp;lt;0000000092489f59&amp;gt;] i2c_device_probe+0x28d/0x680
    [&amp;lt;000000001038babe&amp;gt;] really_probe+0x17c/0x3f0
    [&amp;lt;0000000098c7af1c&amp;gt;] __driver_probe_device+0xe3/0x170
    [&amp;lt;00000000e1b3dc24&amp;gt;] device_driver_attach+0x34/0x80
    [&amp;lt;000000005a04a34d&amp;gt;] bind_store+0x10b/0x1a0
    [&amp;lt;00000000ce25d4f2&amp;gt;] drv_attr_store+0x49/0x70
    [&amp;lt;000000007d9f4e9a&amp;gt;] sysfs_kf_write+0x8c/0xb0
    [&amp;lt;00000000be6cff0f&amp;gt;] kernfs_fop_write_iter+0x216/0x2e0
    [&amp;lt;0000000031ddb40a&amp;gt;] vfs_write+0x658/0x810
    [&amp;lt;0000000041beecdd&amp;gt;] ksys_write+0xd6/0x1b0
    [&amp;lt;0000000023755840&amp;gt;] do_syscall_64+0x38/0x90
    [&amp;lt;00000000b2cc2da2&amp;gt;] entry_SYSCALL_64_after_hwframe+0x63/0xcd&lt;/p&gt;
&lt;p&gt;ov2740_init_controls() won&amp;#39;t clean all the allocated resources in fail
path, which may causes the memleaks. Add v4l2_ctrl_handler_free() to
prevent memleak.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;media: ov2740: Fix memleak in ov2740_init_controls()&lt;/p&gt;
&lt;p&gt;There is a kmemleak when testing the media/i2c/ov2740.c with bpf mock
device:&lt;/p&gt;
&lt;p&gt;unreferenced object 0xffff8881090e19e0 (size 16):
  comm &amp;#34;51-i2c-ov2740&amp;#34;, pid 278, jiffies 4294781584 (age 23.613s)
  hex dump (first 16 bytes):
    00 f3 7c 0b 81 88 ff ff 80 75 6a 09 81 88 ff ff  ..|......uj.....
  backtrace:
    [&amp;lt;000000004e9fad8f&amp;gt;] __kmalloc_node+0x44/0x1b0
    [&amp;lt;0000000039c802f4&amp;gt;] kvmalloc_node+0x34/0x180
    [&amp;lt;000000009b8b5c63&amp;gt;] v4l2_ctrl_handler_init_class+0x11d/0x180
[videodev]
    [&amp;lt;0000000038644056&amp;gt;] ov2740_probe+0x37d/0x84f [ov2740]
    [&amp;lt;0000000092489f59&amp;gt;] i2c_device_probe+0x28d/0x680
    [&amp;lt;000000001038babe&amp;gt;] really_probe+0x17c/0x3f0
    [&amp;lt;0000000098c7af1c&amp;gt;] __driver_probe_device+0xe3/0x170
    [&amp;lt;00000000e1b3dc24&amp;gt;] device_driver_attach+0x34/0x80
    [&amp;lt;000000005a04a34d&amp;gt;] bind_store+0x10b/0x1a0
    [&amp;lt;00000000ce25d4f2&amp;gt;] drv_attr_store+0x49/0x70
    [&amp;lt;000000007d9f4e9a&amp;gt;] sysfs_kf_write+0x8c/0xb0
    [&amp;lt;00000000be6cff0f&amp;gt;] kernfs_fop_write_iter+0x216/0x2e0
    [&amp;lt;0000000031ddb40a&amp;gt;] vfs_write+0x658/0x810
    [&amp;lt;0000000041beecdd&amp;gt;] ksys_write+0xd6/0x1b0
    [&amp;lt;0000000023755840&amp;gt;] do_syscall_64+0x38/0x90
    [&amp;lt;00000000b2cc2da2&amp;gt;] entry_SYSCALL_64_after_hwframe+0x63/0xcd&lt;/p&gt;
&lt;p&gt;ov2740_init_controls() won&amp;#39;t clean all the allocated resources in fail
path, which may causes the memleaks. Add v4l2_ctrl_handler_free() to
prevent memleak.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2023-53349</guid>
    </item>
  </channel>
</rss>
