CVE-2026-89872EPSS p10.2%
CVE-2026-89872CVE-2026-89872
Description
In the Linux kernel, the following vulnerability has been resolved:
media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
In v4l2_fwnode_parse_link(), the remote endpoint fwnode reference is
acquired using fwnode_graph_get_remote_endpoint(). This reference is
properly released in the error paths, but it is leaked on the success
path.
Add the missing fwnode_handle_put() before returning 0 to prevent the
reference leak.
[Sakari Ailus: Fix subject prefix and coding style a little.]
Scoring
| EPSS | 0.21% probability of exploitation · percentile 10.2% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-16 |