Linux Kernel Hi846 Media Driver Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's media driver for the SK Hynix Hi-846 camera. The issue arises in the function 'hi846_init_controls()', which fails to release an allocated control handler if an error occurs during initialization. This oversight leads to a resource leak. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability causes a memory leak, where allocated resources are not properly released, potentially leading to increased memory usage and exhaustion of available memory resources.

Reproduction

The vulnerability can be reproduced by initializing the controls for the Hi846 camera driver. If an error occurs during the initialization process, the allocated control handler is not freed, causing a memory leak. This can be observed by monitoring the memory usage of the system, which will show an increase that is not reclaimed.

Remediation

The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version of the kernel where this issue has been fixed.

Added: Sep 16, 2025, 4:47 PM
Updated: Sep 16, 2025, 4:47 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
7.7
relevance
0.5
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.