Memory Leak Vulnerability in Linux Kernel's Media Component

CVE-2023-53300

What is CVE-2023-53300?

A memory leak has been identified in the Linux kernel's media component, specifically within the hi846 driver. The vulnerability arises during the initialization of controls where, upon failure, allocated control handlers (ctrl_hdlr) are not properly freed. This oversight leads to resource leaks, which can degrade system performance over time. A fix has been implemented to ensure that the v4l2_ctrl_handler_free function is called, resolving the memory leak issue effectively.

References