{"id":"CVE-2026-89872","revision":"abdbd23d13964e299ddaaabe03365f2d","records":[{"revision":"abdbd23d13964e299ddaaabe03365f2d","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-89872","aliases":[],"title":"media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link\n\nIn v4l2_fwnode_parse_link(), the remote endpoint fwnode reference is\nacquired using fwnode_graph_get_remote_endpoint(). This reference is\nproperly released in the error paths, but it is leaked on the success\npath.\n\nAdd the missing fwnode_handle_put() before returning 0 to prevent the\nreference leak.\n\n[Sakari Ailus: Fix subject prefix and coding style a little.]","state":0,"publishedAt":"2026-09-16T10:31:40.647+00:00","modifiedAt":"2026-10-19T08:54:05.348+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/media/v4l2-core/v4l2-fwnode.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"ca50c197bd9610ea984cfc0dc6855f183cbb46f8\",\n                            \"lessThan\": \"c9b5238d173ee9b94dcaa2b34244ea89c8024feb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ca50c197bd9610ea984cfc0dc6855f183cbb46f8\",\n                            \"lessThan\": \"ccd8d1d80afab8b492a583ae81bfd295835bab2f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ca50c197bd9610ea984cfc0dc6855f183cbb46f8\",\n                            \"lessThan\": \"d92dc4692834e04bc0ef1d0908589852050d1a66\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ca50c197bd9610ea984cfc0dc6855f183cbb46f8\",\n                            \"lessThan\": \"ef609b3ce456f021320fee2fb7e45094a3ccf232\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ca50c197bd9610ea984cfc0dc6855f183cbb46f8\",\n                            \"lessThan\": \"578c4bfa28bf21458ecdde2fd3fc429475f34c10\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ca50c197bd9610ea984cfc0dc6855f183cbb46f8\",\n                            \"lessThan\": \"3ced388b7908270529e5aa6d221840114b6c33bc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ca50c197bd9610ea984cfc0dc6855f183cbb46f8\",\n                            \"lessThan\": \"881aafb139520570fd3390bf9938d7098b7fbb99\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ca50c197bd9610ea984cfc0dc6855f183cbb46f8\",\n                            \"lessThan\": \"a6e86efd7f85e519bf48417f41923f8bd51f1597\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/media/v4l2-core/v4l2-fwnode.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.13\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.270\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.221\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.51\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.5\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/c9b5238d173ee9b94dcaa2b34244ea89c8024feb","https://git.kernel.org/stable/c/ccd8d1d80afab8b492a583ae81bfd295835bab2f","https://git.kernel.org/stable/c/d92dc4692834e04bc0ef1d0908589852050d1a66","https://git.kernel.org/stable/c/ef609b3ce456f021320fee2fb7e45094a3ccf232","https://git.kernel.org/stable/c/578c4bfa28bf21458ecdde2fd3fc429475f34c10","https://git.kernel.org/stable/c/3ced388b7908270529e5aa6d221840114b6c33bc","https://git.kernel.org/stable/c/881aafb139520570fd3390bf9938d7098b7fbb99","https://git.kernel.org/stable/c/a6e86efd7f85e519bf48417f41923f8bd51f1597"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89872","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-89872","identifiers":["CVE-2026-89872"]},"retained":false,"historicalAffected":[]}],"coverage":[]}