Log in Start free

Vulnerability · Published Oct 22, 2025 · Assigned by Linux

CVE-2023-53700media: max9286: Fix memleak in max9286_v4l2_register()

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 88.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: media: max9286: Fix memleak in max9286_v4l2_register() There is a kmemleak when testing the media/i2c/max9286.c with bpf mock device: kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) unreferenced object 0xffff88810defc400 (size 256): comm "python3", pid 278, jiffies 4294737563 (age 31.978s) hex dump (first 32 bytes): 28 06 a7 0a 81 88 ff ff 00 fe 22 12 81 88 ff ff (........."..... 10 c4 ef 0d 81 88 ff ff 10 c4 ef 0d 81 88 ff ff ................ backtrace: [<00000000191de6a7>] __kmalloc_node+0x44/0x1b0 [<000000002f4912b7>] kvmalloc_node+0x34/0x180 [<0000000057dc4cae>] v4l2_ctrl_new+0x325/0x10f0 [videodev] [<0000000026030272>] v4l2_ctrl_new_std+0x16f/0x210 [videodev] [<00000000f0d9ea2f>] max9286_probe+0x76e/0xbff [max9286] [<00000000ea8f6455>] i2c_device_probe+0x28d/0x680 [<0000000087529af3>] really_probe+0x17c/0x3f0 [<00000000b08be526>] __driver_probe_device+0xe3/0x170 [<000000004382edea>] driver_probe_device+0x49/0x120 [<000000007bde528a>] __device_attach_driver+0xf7/0x150 [<000000009f9c6ab4>] bus_for_each_drv+0x114/0x180 [<00000000c8aaf588>] __device_attach+0x1e5/0x2d0 [<0000000041cc06b9>] bus_probe_device+0x126/0x140 [<000000002309860d>] device_add+0x810/0x1130 [<000000002827bf98>] i2c_new_client_device+0x359/0x4f0 [<00000000593bdc85>] of_i2c_register_device+0xf1/0x110 max9286_v4l2_register() calls v4l2_ctrl_new_std(), but won't free the created v412_ctrl when fwnode_graph_get_endpoint_by_id() failed, which causes the memleak. Call v4l2_ctrl_handler_free() to free the v412_ctrl.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.20-1DEBIAN-CVE-2023-53700
Debian:13linux6.1.20-1DEBIAN-CVE-2023-53700
Debian:14linux6.1.20-1DEBIAN-CVE-2023-53700
Ubuntu:22.04:LTSlinux5.15.0-75.82UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-aws5.15.0-1038.43UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-azure5.15.0-1040.47UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1041.48.1UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-gcp5.15.0-1036.44UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-gke5.15.0-1036.41UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1022.27UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-ibm5.15.0-1032.35UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1033.38UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-kvm5.15.0-1035.40UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-75.82UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1027.27UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1015.15UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-oracle5.15.0-1037.43UBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-raspi5.15.0-1032.35UBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53700
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53700
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53700

Affected products (as reported)

VendorProductVersions
Linux Linux 66d8c9d2422da21ed41f75c03ba0685987b65fe0 – before 505ff3a0c5951684c3a43094ca4c1a74683d568166d8c9d2422da21ed41f75c03ba0685987b65fe0 – before 5897fe3ebe8252993579e1bee715ebfe5504e05266d8c9d2422da21ed41f75c03ba0685987b65fe0 – before 724039e013b34f46344abdbf8c74e6a65a82832766d8c9d2422da21ed41f75c03ba0685987b65fe0 – before 5e31213fa017c20ccc989033a5f4a626473aa2ca66d8c9d2422da21ed41f75c03ba0685987b65fe0 – before 8636c5fc7658c7c6299fb8b352d24ea4b9ba99e2
Linux Linux 5.9

References