Linux Kernel Runtime Reference Count Leak Vulnerability in OV5647 I2C Driver

A runtime reference count leak vulnerability has been identified in the Linux kernel's OV5647 I2C driver. This issue arises because the driver improperly handles three control cases—AUTOGAIN, EXPOSURE_AUTO, and ANALOGUE_GAIN—by directly returning values without first calling 'pm_runtime_put()'. This oversight leads to a leak in the runtime power management reference count. The vulnerability affects the stable versions of the Linux kernel.

Impact

The vulnerability causes a runtime power management reference count leak, which can lead to improper management of power states and potentially cause performance issues or increased power consumption.

Remediation

Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability. The patch can be downloaded from the Linux kernel Git repository.