https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:17:46 +0000 https://vulnerability.circl.lu/vuln/cve-2026-93223 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>staging: media: tegra-video: fix of_node_put() on VIP parse errors</p> <p>tegra_vip_channel_of_parse() initializes np from dev-&gt;of_node without taking a reference, but its error paths drop one through the err_node_put label. This underflows the refcount of the VIP device&#39;s OF node when endpoint parsing fails on a malformed device tree.</p> <p>The only reference the function takes on np is the success-path of_node_get() stored in vip-&gt;chan.of_node, and that one is already released by the tegra_vip_init() error path and by tegra_vip_exit().</p> <p>Return errors directly instead of jumping to the bogus cleanup label.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>staging: media: tegra-video: fix of_node_put() on VIP parse errors</p> <p>tegra_vip_channel_of_parse() initializes np from dev-&gt;of_node without taking a reference, but its error paths drop one through the err_node_put label. This underflows the refcount of the VIP device&#39;s OF node when endpoint parsing fails on a malformed device tree.</p> <p>The only reference the function takes on np is the success-path of_node_get() stored in vip-&gt;chan.of_node, and that one is already released by the tegra_vip_init() error path and by tegra_vip_exit().</p> <p>Return errors directly instead of jumping to the bogus cleanup label.</p> https://vulnerability.circl.lu/vuln/cve-2026-93223