CVE-2023-54183 - Vulnerability Details

- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL,
so fwnode_handle_put() is a no-op.

Release the reference taken from a previous fwnode_graph_get_port_parent()
call instead.

Also handle fwnode_graph_get_port_parent() failures.

In order to fix these issues, add an error handling path to the function
and the needed gotos.

Published: 2025-12-30

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`ca50c197bd9610ea984cfc0dc6855f183cbb46f8`	affected	< 2342942331e1f034ff58f293e10d0d9b7581601f
`ca50c197bd9610ea984cfc0dc6855f183cbb46f8`	affected	< 4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877
`ca50c197bd9610ea984cfc0dc6855f183cbb46f8`	affected	< d8a8f75fce049bdb3144b607deefe51e996b9660
`ca50c197bd9610ea984cfc0dc6855f183cbb46f8`	affected	< caf058833b6f3fe7beabf738110f79bb987c8fff
`ca50c197bd9610ea984cfc0dc6855f183cbb46f8`	affected	< 25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8
`ca50c197bd9610ea984cfc0dc6855f183cbb46f8`	affected	< ed1696f7f92e8404940d51dec80a123aa18163a8
`ca50c197bd9610ea984cfc0dc6855f183cbb46f8`	affected	< e8a1cd87bb9fa3149ee112ecb8058908dc9b520e
`ca50c197bd9610ea984cfc0dc6855f183cbb46f8`	affected	< d7b13edd4cb4bfa335b6008ab867ac28582d3e5c

Linux

affected

Version	Status	Constraints
`4.13`	affected	—
`0`	unaffected	< 4.13
`4.19.295`	unaffected	≤ 4.19.*
`5.4.257`	unaffected	≤ 5.4.*
`5.10.195`	unaffected	≤ 5.10.*
`5.15.132`	unaffected	≤ 5.15.*
`6.1.53`	unaffected	≤ 6.1.*
`6.4.16`	unaffected	≤ 6.4.*
`6.5.3`	unaffected	≤ 6.5.*
`6.6`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/2342942331e1f034ff58f293e10d0d9b7581601f
https://git.kernel.org/stable/c/25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8
https://git.kernel.org/stable/c/4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877
https://git.kernel.org/stable/c/caf058833b6f3fe7beabf738110f79bb987c8fff
https://git.kernel.org/stable/c/d7b13edd4cb4bfa335b6008ab867ac28582d3e5c
https://git.kernel.org/stable/c/d8a8f75fce049bdb3144b607deefe51e996b9660
https://git.kernel.org/stable/c/e8a1cd87bb9fa3149ee112ecb8058908dc9b520e
https://git.kernel.org/stable/c/ed1696f7f92e8404940d51dec80a123aa18163a8
https://lore.kernel.org/linux-cve-announce/2025123025-CVE-2023-54183-3917@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54183
https://www.cve.org/CVERecord?id=CVE-2023-54183

History

Thu, 01 Jan 2026 00:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123025-CVE-2023-54183-3917@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54183 https://www.cve.org/CVERecord?id=CVE-2023-54183

Tue, 30 Dec 2025 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() If fwnode_graph_get_remote_endpoint() fails, 'fwnode' is known to be NULL, so fwnode_handle_put() is a no-op. Release the reference taken from a previous fwnode_graph_get_port_parent() call instead. Also handle fwnode_graph_get_port_parent() failures. In order to fix these issues, add an error handling path to the function and the needed gotos.
Title		media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2342942331e1f034ff58f293e10d0d9b7581601f https://git.kernel.org/stable/c/25afb3e03bf8ab02567af4b6ffbfd6250a91a9f8 https://git.kernel.org/stable/c/4bc5ffaf8ac4f3e7a1fcd10a0a0e7b022b694877 https://git.kernel.org/stable/c/caf058833b6f3fe7beabf738110f79bb987c8fff https://git.kernel.org/stable/c/d7b13edd4cb4bfa335b6008ab867ac28582d3e5c https://git.kernel.org/stable/c/d8a8f75fce049bdb3144b607deefe51e996b9660 https://git.kernel.org/stable/c/e8a1cd87bb9fa3149ee112ecb8058908dc9b520e https://git.kernel.org/stable/c/ed1696f7f92e8404940d51dec80a123aa18163a8

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:08:53.888Z

Updated: 2026-05-11T19:57:04.159Z

Reserved: 2025-12-30T12:06:44.497Z

Link: CVE-2023-54183

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:16:06.247

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-54183

Redhat

Severity :

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54183 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object