CVE-2023-54109
Reference Count Leak in Linux rcar_fdp1 Media Driver Fixed
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a reference count leak in the Linux kernel's media subsystem, specifically in the rcar_fdp1 driver. The function rcar_fcp_get() increments a reference count that should be balanced by a corresponding rcar_fcp_put() call. However, the missing rcar_fcp_put() calls in the fdp1_remove function and error paths of fdp1_probe() caused the reference count to leak, potentially leading to resource management issues. The fix adds the missing rcar_fcp_put() calls to properly balance the references.
How can this vulnerability impact me? :
The reference count leak can lead to resource leaks within the kernel, which may cause increased memory usage or instability in the affected media driver. Over time, this could degrade system performance or cause unexpected behavior in media-related functionalities relying on the rcar_fdp1 driver.