PT-2025-54037 · Linux · Linux Kernel

Published 2023-02-03 · Updated 2026-02-24 · CVE-2023-54208

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:A/AC:H/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the ov5675 init controls() function within the media/i2c/ov5675.c file. This leak occurs when testing with a bpf mock device, specifically during the allocation of resources that are not properly freed in the failure path. The function v4l2 ctrl handler init class is involved in the initialization process. The issue is addressed by adding v4l2 ctrl handler free() to prevent the memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-01303

CVE-2023-54208

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 982

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54208.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-54208 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01303 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54208 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54208 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54208 · Security Note
• https://ubuntu.com/security/CVE-2023-54208 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54208 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54208 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54208 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note