{"id":"DEBIAN-CVE-2023-53349","details":"In the Linux kernel, the following vulnerability has been resolved:  media: ov2740: Fix memleak in ov2740_init_controls()  There is a kmemleak when testing the media/i2c/ov2740.c with bpf mock device:  unreferenced object 0xffff8881090e19e0 (size 16):   comm \"51-i2c-ov2740\", pid 278, jiffies 4294781584 (age 23.613s)   hex dump (first 16 bytes):     00 f3 7c 0b 81 88 ff ff 80 75 6a 09 81 88 ff ff  ..|......uj.....   backtrace:     [\u003c000000004e9fad8f\u003e] __kmalloc_node+0x44/0x1b0     [\u003c0000000039c802f4\u003e] kvmalloc_node+0x34/0x180     [\u003c000000009b8b5c63\u003e] v4l2_ctrl_handler_init_class+0x11d/0x180 [videodev]     [\u003c0000000038644056\u003e] ov2740_probe+0x37d/0x84f [ov2740]     [\u003c0000000092489f59\u003e] i2c_device_probe+0x28d/0x680     [\u003c000000001038babe\u003e] really_probe+0x17c/0x3f0     [\u003c0000000098c7af1c\u003e] __driver_probe_device+0xe3/0x170     [\u003c00000000e1b3dc24\u003e] device_driver_attach+0x34/0x80     [\u003c000000005a04a34d\u003e] bind_store+0x10b/0x1a0     [\u003c00000000ce25d4f2\u003e] drv_attr_store+0x49/0x70     [\u003c000000007d9f4e9a\u003e] sysfs_kf_write+0x8c/0xb0     [\u003c00000000be6cff0f\u003e] kernfs_fop_write_iter+0x216/0x2e0     [\u003c0000000031ddb40a\u003e] vfs_write+0x658/0x810     [\u003c0000000041beecdd\u003e] ksys_write+0xd6/0x1b0     [\u003c0000000023755840\u003e] do_syscall_64+0x38/0x90     [\u003c00000000b2cc2da2\u003e] entry_SYSCALL_64_after_hwframe+0x63/0xcd  ov2740_init_controls() won't clean all the allocated resources in fail path, which may causes the memleaks. Add v4l2_ctrl_handler_free() to prevent memleak.","modified":"2026-09-15T09:03:02.628006885Z","published":"2025-09-17T15:15:38.827Z","upstream":["CVE-2023-53349"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-53349"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53349.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53349.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53349.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}