CVE-2026-93071media: bcm2835-unicam: Fix asc leaked in error/remove path
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: media: bcm2835-unicam: Fix asc leaked in error/remove path v4l2_async_nf_add_fwnode_remote() allocates the asc, which is freed when v4l2_async_nf_cleanup() is called. Call v4l2_async_nf_cleanup() properly in the driver paths. Discovered with kmemleak after rmmod: unreferenced object 0xffff000084526b80 (size 64): comm "modprobe", pid 185, jiffies 4295013512 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 e8 0d ff bf 00 00 ff ff ................ 40 83 bc 84 00 00 ff ff 60 83 bc 84 00 00 ff ff @.......`....... backtrace (crc ac584083): [<00000000ffb081a7>] kmemleak_alloc+0x38/0x44 [<00000000d2fd9301>] __kmalloc+0x1b0/0x250 [<000000004dd5354d>] __v4l2_async_nf_add_fwnode+0x28/0x9c [<0000000067587657>] __v4l2_async_nf_add_fwnode_remote+0x3c/0x64
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 392cd78d495f36c201eb5cc425b01017d493e094 before 5479372db364c80bb6bd59f640f5c31de3984bab; 392cd78d495f36c201eb5cc425b01017d493e094 builds before 2c29cd408ef86e695acb2a5d4e00fa2f5695368d; from 392cd78d495f36c201eb5cc425b01017d493e094 before de9be39cefda1ecd762e6a913665c01f7bb18100; 392cd78d495f36c201eb5cc425b01017d493e094 builds before 253c9659e25131b0169f718e7d094ac1aa0d9279 | CNA record |
References
- https://git.kernel.org/stable/c/5479372db364c80bb6bd59f640f5c31de3984bab
- https://git.kernel.org/stable/c/2c29cd408ef86e695acb2a5d4e00fa2f5695368d
- https://git.kernel.org/stable/c/de9be39cefda1ecd762e6a913665c01f7bb18100
- https://git.kernel.org/stable/c/253c9659e25131b0169f718e7d094ac1aa0d9279
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.