Not yet scoredPublished Dec 24, 2025

CVE-2023-54109media: rcar_fdp1: Fix refcount leak in probe and remove function

Updated under an hour ago (Oct 27, 2026, 7:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: rcar_fdp1: Fix refcount leak in probe and remove function rcar_fcp_get() take reference, which should be balanced with rcar_fcp_put(). Add missing rcar_fcp_put() in fdp1_remove and the error paths of fdp1_probe() to fix this. [hverkuil: resolve merge conflict, remove() is now void]

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	4710b752e029f3f82dd4a84d9dc61fe72c97bf82 builds before 418a8f3140e07f33bbd5a81625d0ef46c0732cef; 4710b752e029f3f82dd4a84d9dc61fe72c97bf82 builds before 9df630dafa1a59946d1da6f070d4cb64f14ea57c; 4710b752e029f3f82dd4a84d9dc61fe72c97bf82 builds before 1acb982e3616e70128994fdecf2368a259c8a489; 4710b752e029f3f82dd4a84d9dc61fe72c97bf82 builds before 2322b262d2205720518785c2706a3283725ba402; 4710b752e029f3f82dd4a84d9dc61fe72c97bf82 builds before 45b7461d914c867ef21c74798da8c42d13d3a0df; 4710b752e029f3f82dd4a84d9dc61fe72c97bf82 builds before 59c6addfaaaa09ff7654e4d8793cb16fd22a46d4; from 4710b752e029f3f82dd4a84d9dc61fe72c97bf82 before 48765ca7c6b71bf73a4cc8475a4bad9e2633cf61; from 4710b752e029f3f82dd4a84d9dc61fe72c97bf82 before c766c90faf93897b77c9c5daa603cffab85ba907	CNA record

References

References

https://git.kernel.org/stable/c/418a8f3140e07f33bbd5a81625d0ef46c0732cef
https://git.kernel.org/stable/c/9df630dafa1a59946d1da6f070d4cb64f14ea57c
https://git.kernel.org/stable/c/1acb982e3616e70128994fdecf2368a259c8a489
https://git.kernel.org/stable/c/2322b262d2205720518785c2706a3283725ba402
https://git.kernel.org/stable/c/45b7461d914c867ef21c74798da8c42d13d3a0df
https://git.kernel.org/stable/c/59c6addfaaaa09ff7654e4d8793cb16fd22a46d4
https://git.kernel.org/stable/c/48765ca7c6b71bf73a4cc8475a4bad9e2633cf61
https://git.kernel.org/stable/c/c766c90faf93897b77c9c5daa603cffab85ba907

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.