{"id":"DEBIAN-CVE-2023-54208","details":"In the Linux kernel, the following vulnerability has been resolved:  media: ov5675: Fix memleak in ov5675_init_controls()  There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device:  AssertionError: unreferenced object 0xffff888107362160 (size 16):   comm \"python3\", pid 277, jiffies 4294832798 (age 20.722s)   hex dump (first 16 bytes):     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003c00000000abe7d67c\u003e] __kmalloc_node+0x44/0x1b0     [\u003c000000008a725aac\u003e] kvmalloc_node+0x34/0x180     [\u003c000000009a53cd11\u003e] v4l2_ctrl_handler_init_class+0x11d/0x180 [videodev]     [\u003c0000000055b46db0\u003e] ov5675_probe+0x38b/0x897 [ov5675]     [\u003c00000000153d886c\u003e] i2c_device_probe+0x28d/0x680     [\u003c000000004afb7e8f\u003e] really_probe+0x17c/0x3f0     [\u003c00000000ff2f18e4\u003e] __driver_probe_device+0xe3/0x170     [\u003c000000000a001029\u003e] driver_probe_device+0x49/0x120     [\u003c00000000e39743c7\u003e] __device_attach_driver+0xf7/0x150     [\u003c00000000d32fd070\u003e] bus_for_each_drv+0x114/0x180     [\u003c000000009083ac41\u003e] __device_attach+0x1e5/0x2d0     [\u003c0000000015b4a830\u003e] bus_probe_device+0x126/0x140     [\u003c000000007813deaf\u003e] device_add+0x810/0x1130     [\u003c000000007becb867\u003e] i2c_new_client_device+0x386/0x540     [\u003c000000007f9cf4b4\u003e] of_i2c_register_device+0xf1/0x110     [\u003c00000000ebfdd032\u003e] of_i2c_notify+0xfc/0x1f0  ov5675_init_controls() won't clean all the allocated resources in fail path, which may causes the memleaks. Add v4l2_ctrl_handler_free() to prevent memleak.","modified":"2026-09-15T08:47:41.439645965Z","published":"2025-12-30T13:16:08.977Z","upstream":["CVE-2023-54208"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-54208"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54208.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54208.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54208.json"}}],"schema_version":"1.9.0"}