CVE-2026-43231 Details
Description
In the Linux kernel, the following vulnerability has been resolved: media: radio-keene: fix memory leak in error path Fix a memory leak in usb_keene_probe(). The v4l2 control handler is initialized and controls are added, but if v4l2_device_register() or video_register_device() fails afterward, the handler was never freed, leaking memory. Add v4l2_ctrl_handler_free() call in the err_v4l2 error path to ensure the control handler is properly freed for all error paths after it is initialized.
A memory leak vulnerability has been identified in the Linux kernel's radio Keene driver. The issue arises in the 'usb_keene_probe' function, where the Video4Linux2 (v4l2) control handler is initialized and controls are added. If the subsequent calls to 'v4l2_device_register' or 'video_register_device' fail, the control handler is not freed, leading to a memory leak. This vulnerability affects the Linux kernel stable group.
The vulnerability has been addressed in the Linux kernel by adding a call to 'v4l2_ctrl_handler_free' in the error handling path of the 'usb_keene_probe' function. Users should upgrade to the latest version of the Linux kernel where this fix has been applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1d8558a232ecb187e8e0328d6347a125f437a0fc | kernel.org | Patch |
| https://git.kernel.org/stable/c/242b0aabb1866024a7995a767ac330c158b39aa4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/27c508f61963013fdf29097578284099ee7a85a4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2fe28a63d598235595a9601e0d8fdc7c8f4fd575 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7fa9754f48cb8eefa566156be341e63d313247e5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ad85bb5623079a35bd400f51de2e2fbc2170bdb2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b8bf939d77c0cd01118e953bbf554e0fa15e9006 | kernel.org | Patch |
| https://git.kernel.org/stable/c/de204d87e7d61859937272fe30cbdd46a4cfb10a | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.4, < 5.10.252 >= 5.11, < 5.15.202 >= 5.16, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 8, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |