CVE-2023-54109: media: rcar_fdp1: Fix refcount leak in probe and remove function

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: media: rcar_fdp1: Fix refcount leak in probe and remove function rcar_fcp_get() take reference, which should be balanced with rcar_fcp_put(). Add missing rcar_fcp_put() in fdp1_remove and the error paths of fdp1_probe() to fix this. [hverkuil: resolve merge conflict, remove() is now void]

Affected products

Linux kernel: 4.10 — fixed in 6.4

How to fix

Upgrade to a fixed version: Linux kernel 6.4. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/1acb982e3616e70128994fdecf2368a259c8a489
https://git.kernel.org/stable/c/2322b262d2205720518785c2706a3283725ba402
https://git.kernel.org/stable/c/418a8f3140e07f33bbd5a81625d0ef46c0732cef
https://git.kernel.org/stable/c/45b7461d914c867ef21c74798da8c42d13d3a0df
https://git.kernel.org/stable/c/48765ca7c6b71bf73a4cc8475a4bad9e2633cf61
https://git.kernel.org/stable/c/59c6addfaaaa09ff7654e4d8793cb16fd22a46d4
https://git.kernel.org/stable/c/9df630dafa1a59946d1da6f070d4cb64f14ea57c
https://git.kernel.org/stable/c/c766c90faf93897b77c9c5daa603cffab85ba907

Get alerted when CVE-2023-54109 or the next vulnerability affects your stack