Medium 5.5Published May 6, 2026

CVE-2026-43231media: radio-keene: fix memory leak in error path

Updated under an hour ago (Oct 27, 2026, 3:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: media: radio-keene: fix memory leak in error path Fix a memory leak in usb_keene_probe(). The v4l2 control handler is initialized and controls are added, but if v4l2_device_register() or video_register_device() fails afterward, the handler was never freed, leaking memory. Add v4l2_ctrl_handler_free() call in the err_v4l2 error path to ensure the control handler is properly freed for all error paths after it is initialized.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1bf20c3a0c616f44359c573b533d06bae960ee45 before ad85bb5623079a35bd400f51de2e2fbc2170bdb2; from 1bf20c3a0c616f44359c573b533d06bae960ee45 before 242b0aabb1866024a7995a767ac330c158b39aa4; from 1bf20c3a0c616f44359c573b533d06bae960ee45 before 2fe28a63d598235595a9601e0d8fdc7c8f4fd575; from 1bf20c3a0c616f44359c573b533d06bae960ee45 before 27c508f61963013fdf29097578284099ee7a85a4; from 1bf20c3a0c616f44359c573b533d06bae960ee45 before 7fa9754f48cb8eefa566156be341e63d313247e5; from 1bf20c3a0c616f44359c573b533d06bae960ee45 before 1d8558a232ecb187e8e0328d6347a125f437a0fc; from 1bf20c3a0c616f44359c573b533d06bae960ee45 before de204d87e7d61859937272fe30cbdd46a4cfb10a; from 1bf20c3a0c616f44359c573b533d06bae960ee45 before b8bf939d77c0cd01118e953bbf554e0fa15e9006	CNA record
linux linux_kernel linux:linux_kernel	from 3.4 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/ad85bb5623079a35bd400f51de2e2fbc2170bdb2	patch
https://git.kernel.org/stable/c/242b0aabb1866024a7995a767ac330c158b39aa4	patch
https://git.kernel.org/stable/c/2fe28a63d598235595a9601e0d8fdc7c8f4fd575	patch
https://git.kernel.org/stable/c/27c508f61963013fdf29097578284099ee7a85a4	patch
https://git.kernel.org/stable/c/7fa9754f48cb8eefa566156be341e63d313247e5	patch
https://git.kernel.org/stable/c/1d8558a232ecb187e8e0328d6347a125f437a0fc	patch
https://git.kernel.org/stable/c/de204d87e7d61859937272fe30cbdd46a4cfb10a	patch
https://git.kernel.org/stable/c/b8bf939d77c0cd01118e953bbf554e0fa15e9006	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.