Not yet scoredPublished Dec 30, 2025

CVE-2023-54183media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

Updated under an hour ago (Oct 27, 2026, 7:00 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL, so fwnode_handle_put() is a no-op. Release the reference taken from a previous fwnode_graph_get_port_parent() call instead. Also handle fwnode_graph_get_port_parent() failures. In order to fix these issues, add an error handling path to the function and the needed gotos.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ca50c197bd9610ea984cfc0dc6855f183cbb46f8 before 2342942331e1f034ff58f293e10d0d9b7581601f; from ca50c197bd9610ea984cfc0dc6855f183cbb46f8 before 4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877; from ca50c197bd9610ea984cfc0dc6855f183cbb46f8 before d8a8f75fce049bdb3144b607deefe51e996b9660; from ca50c197bd9610ea984cfc0dc6855f183cbb46f8 before caf058833b6f3fe7beabf738110f79bb987c8fff; from ca50c197bd9610ea984cfc0dc6855f183cbb46f8 before 25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8; from ca50c197bd9610ea984cfc0dc6855f183cbb46f8 before ed1696f7f92e8404940d51dec80a123aa18163a8; from ca50c197bd9610ea984cfc0dc6855f183cbb46f8 before e8a1cd87bb9fa3149ee112ecb8058908dc9b520e; from ca50c197bd9610ea984cfc0dc6855f183cbb46f8 before d7b13edd4cb4bfa335b6008ab867ac28582d3e5c	CNA record

References

References

https://git.kernel.org/stable/c/2342942331e1f034ff58f293e10d0d9b7581601f
https://git.kernel.org/stable/c/4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877
https://git.kernel.org/stable/c/d8a8f75fce049bdb3144b607deefe51e996b9660
https://git.kernel.org/stable/c/caf058833b6f3fe7beabf738110f79bb987c8fff
https://git.kernel.org/stable/c/25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8
https://git.kernel.org/stable/c/ed1696f7f92e8404940d51dec80a123aa18163a8
https://git.kernel.org/stable/c/e8a1cd87bb9fa3149ee112ecb8058908dc9b520e
https://git.kernel.org/stable/c/d7b13edd4cb4bfa335b6008ab867ac28582d3e5c

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.