Cloudanix VulnDB

CVE-2023-54109

None

CVSS

—

EPSS

0.2%

Published

Dec 24, 2025

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A coding mistake in Linux media handling code can cause memory to be handled incorrectly, which might make some systems unstable until fixed by an update.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Theoretical
Impact
Denial Of Service
Component
OS kernel
Class
Memory Corruption
Remediation
Patch
Effort
Medium
Patch risk
Low

What it actually does

Reference count leak in the rcar_fdp1 media driver where rcar_fcp_get() calls are not balanced by rcar_fcp_put() in fdp1_remove and error paths of fdp1_probe, allowing improper memory management.

Why it matters to the business

Potential system instability or crashes on affected Linux systems using the rcar_fdp1 driver; low exploitation likelihood limits immediate operational risk but requires timely patching of kernel and dependent packages.

How an attack unfolds

An attacker with local access triggers the driver's probe or remove paths on hardware using the rcar_fdp1 component to exploit the unbalanced reference count and corrupt memory state.

How to fix it

Update Linux kernel to commit 418a8f3140e07f33bbd5a81625d0ef46c0732cef or later; upgrade picklescan (PyPI) to version 0.0.23.

How to confirm the fix worked

Confirm kernel source contains the balancing rcar_fcp_put() calls in fdp1_probe error paths and fdp1_remove; verify picklescan package version is at least 0.0.23.

Typical attack path

  1. Obtain local access to target system
  2. Trigger rcar_fdp1 driver probe or remove functions
  3. Exploit resulting reference count imbalance for memory corruption

How to detect it

Review kernel logs for driver probe/remove errors and memory-related warnings around the rcar_fdp1 module; no widespread exploitation indicators reported.

What your security team should do

  • Prioritize kernel update on systems using rcar_fdp1 hardware
  • Upgrade all instances of picklescan to 0.0.23
  • Monitor for any local privilege escalation attempts involving media drivers

The record

In the Linux kernel, the following vulnerability has been resolved: media: rcar_fdp1: Fix refcount leak in probe and remove function rcar_fcp_get() take reference, which should be balanced with rcar_fcp_put(). Add missing rcar_fcp_put() in fdp1_remove and the error paths of fdp1_probe() to fix this. [hverkuil: resolve merge conflict, remove() is now void]

Affected packages

Ecosystem Package Introduced Fixed
Linux Kernel 4.10.0 4.19.283

Related vulnerabilities