Linux Kernel Resource Leak Vulnerability in cx25821 Media Driver

Vulnerability

A resource leak vulnerability has been identified in the Linux kernel's media subsystem, specifically within the cx25821 driver. This issue arises in the 'cx25821_dev_setup()' function, where the 'ioremap()' failure is not properly handled, leading to a memory leak. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can lead to a resource leak, where memory is not properly released, potentially causing increased memory usage and degradation of system performance over time.

Reproduction

The vulnerability can be reproduced by loading a cx25821 device that requires memory mapping. If the 'ioremap()' call fails, the driver does not release the previously allocated resources, leading to a memory leak. This can be observed by monitoring the system's memory usage while the driver is loaded.

Remediation

Users can upgrade to the latest version of the Linux kernel, where this vulnerability has been addressed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.

Added: May 6, 2026, 3:17 PM
Updated: May 6, 2026, 3:17 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
7.6
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.