Linux Kernel Media Subsystem Minor Number Management Vulnerability

Vulnerability

A vulnerability exists in the Linux kernel's media subsystem, specifically within the media device node management. The issue arises because the minor number of a device is improperly cleared after the device is released, which can lead to incorrect handling of device nodes. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can cause improper management of media device nodes, potentially leading to resource leaks or incorrect device behavior.

Reproduction

The vulnerability can be reproduced by registering a media device node, releasing it, and then observing that the minor number is incorrectly cleared. This can be verified by checking the media device node management functions, which will show that the minor number was not properly handled during the unregistration process.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.

Added: Nov 12, 2025, 10:37 PM
Updated: Nov 12, 2025, 10:37 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.7
remediation
7.7
relevance
1.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.