Haoxiang Li 80617b75fd media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() ...

commit cdd0f118ef upstream.

vpu_get_plat_device() increases the reference count of the returned
platform device. However, when devm_kzalloc() fails, the reference
is not released, causing a reference leak.

Fix this by calling put_device() on fw_pdev->dev before returning
on the error path.

Fixes: e25a89f743 ("media: mtk-vcodec: potential dereference of null pointer")
Cc: stable@vger.kernel.org
Signed-off-by: Haoxiang Li <haoxiang_li2024@163.com>
Reviewed-by: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com>
Reviewed-by: Tzung-Bi Shih <tzungbi@kernel.org>
Signed-off-by: Nicolas Dufresne <nicolas.dufresne@collabora.com>
Signed-off-by: Hans Verkuil <hverkuil+cisco@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-01-11 15:22:16 +01:00

..

accel

accel/habanalabs: support mapping cb with vmalloc-backed coherent memory

2025-11-24 10:29:44 +01:00

accessibility

…

acpi

ACPI: CPPC: Fix missing PCC check for guaranteed_perf

2026-01-11 15:21:50 +01:00

amba

amba: tegra-ahb: Fix device leak on SMMU enable

2026-01-11 15:22:03 +01:00

android

…

ata

ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()

2025-12-01 11:41:40 +01:00

atm

atm/fore200e: Fix possible data race in fore200e_open()

2025-12-07 06:18:51 +09:00

auxdisplay

…

base

PM: runtime: Do not clear needs_force_resume with enabled runtime PM

2026-01-11 15:22:01 +01:00

bcma

bcma: don't register devices disabled in OF

2025-12-01 11:41:49 +01:00

block

floppy: fix for PAGE_SIZE != 4KB

2026-01-11 15:21:55 +01:00

bluetooth

Bluetooth: btusb: revert use of devm_kzalloc in btusb

2026-01-11 15:22:05 +01:00

bus

ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx

2026-01-11 15:21:51 +01:00

cache

…

cdrom

…

cdx

…

char

char: applicom: fix NULL pointer dereference in ac_ioctl

2026-01-11 15:21:58 +01:00

clk

clk: samsung: exynos-clkout: Assign .num before accessing .hws

2026-01-11 15:22:13 +01:00

clocksource

…

comedi

comedi: check device's attached status in compat ioctls

2026-01-11 15:21:11 +01:00

connector

…

counter

…

cpufreq

cpufreq: nforce2: fix reference count leak in nforce2

2026-01-11 15:21:58 +01:00

cpuidle

cpuidle: governors: teo: Drop misguided target residency check

2026-01-11 15:21:58 +01:00

crypto

crypto: caam - Add check for kcalloc() in test_len()

2026-01-11 15:22:03 +01:00

cxl

…

dax

…

dca

…

devfreq

…

dio

…

dma

…

dma-buf

…

edac

EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection

2025-11-24 10:30:09 +01:00

eisa

…

extcon

extcon: adc-jack: Cleanup wakeup source only if it was enabled

2025-11-24 10:29:55 +01:00

firewire

firewire: nosy: Fix dma_free_coherent() size

2026-01-11 15:22:07 +01:00

firmware

firmware: stratix10-svc: Add mutex in stratix10 memory management

2026-01-11 15:22:14 +01:00

fpga

…

fsi

…

gnss

…

gpio

gpio: regmap: Fix memleak in error path in gpio_regmap_register()

2026-01-11 15:22:02 +01:00

gpu

drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()

2026-01-11 15:22:03 +01:00

greybus

…

hid

HID: logitech-dj: Remove duplicate error logging

2026-01-11 15:22:12 +01:00

hsi

…

hte

…

hv

…

hwmon

hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU

2026-01-11 15:22:04 +01:00

hwspinlock

…

hwtracing

intel_th: Fix error handling in intel_th_output_open

2026-01-11 15:21:58 +01:00

i2c

i2c: amd-mp2: fix reference leak in MP2 PCI device

2026-01-11 15:22:04 +01:00

i3c

i3c: master: svc: Prevent incomplete IBI transaction

2026-01-11 15:21:18 +01:00

idle

…

iio

iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains

2026-01-11 15:21:53 +01:00

infiniband

RDMA/bnxt_re: fix dma_free_coherent() pointer

2026-01-11 15:22:09 +01:00

input

Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table

2026-01-11 15:21:50 +01:00

interconnect

interconnect: debugfs: Fix incorrect error handling for NULL path

2026-01-11 15:21:18 +01:00

iommu

iommu: disable SVA when CONFIG_X86 is set

2026-01-11 15:22:12 +01:00

ipack

…

irqchip

irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()

2026-01-11 15:21:40 +01:00

isdn

isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()

2025-11-24 10:30:13 +01:00

leds

leds: leds-lp50xx: Enable chip before any communication

2026-01-11 15:22:13 +01:00

macintosh

macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse

2026-01-11 15:21:22 +01:00

mailbox

mailbox: pcc: don't zero error register

2025-12-07 06:18:50 +09:00

mcb

…

md

dm-bufio: align write boundary on physical block size

2026-01-11 15:22:14 +01:00

media

media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init()

2026-01-11 15:22:16 +01:00

memory

…

memstick

…

message

…

mfd

mfd: max77620: Fix potential IRQ chip conflict when probing two devices

2026-01-11 15:22:13 +01:00

misc

…

mmc

mmc: sdhci-msm: Avoid early clock doubling during HS400 transition

2026-01-11 15:21:54 +01:00

most

most: usb: fix double free on late probe failure

2025-12-07 06:18:52 +09:00

mtd

mtd: lpddr_cmds: fix signed shifts in lpddr_cmds

2026-01-11 15:21:35 +01:00

mux

…

net

net: stmmac: fix the crash issue for zero copy XDP_TX action

2026-01-11 15:22:08 +01:00

nfc

nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()

2026-01-11 15:21:46 +01:00

ntb

NTB: epf: Allow arbitrary BAR mapping

2025-11-24 10:29:48 +01:00

nubus

…

nvdimm

…

nvme

nvme-fc: don't hold rport lock when putting ctrl

2026-01-11 15:21:53 +01:00

nvmem

…

of

…

opp

…

parisc

parisc: Do not reprogram affinitiy on ASP chip

2026-01-11 15:22:00 +01:00

parport

…

pci

PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths

2026-01-11 15:22:12 +01:00

pcmcia

…

peci

…

perf

…

phy

phy: broadcom: bcm63xx-usbh: fix section mismatches

2026-01-11 15:21:57 +01:00

pinctrl

pinctrl: single: Fix incorrect type for error return variable

2026-01-11 15:21:36 +01:00

platform

platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing

2026-01-11 15:22:07 +01:00

pmdomain

pmdomain: imx: Fix reference count leak in imx_gpc_remove

2025-12-01 11:41:53 +01:00

pnp

…

power

power: supply: apm_power: only unset own apm_get_power_status

2026-01-11 15:21:19 +01:00

powercap

…

pps

…

ps3

…

ptp

…

pwm

pwm: bcm2835: Make sure the channel is enabled after pwm_request()

2026-01-11 15:21:27 +01:00

rapidio

…

ras

…

regulator

regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex

2026-01-11 15:21:33 +01:00

remoteproc

remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs

2026-01-11 15:21:35 +01:00

reset

…

rpmsg

rpmsg: glink: fix rpmsg device leak

2026-01-11 15:22:04 +01:00

rtc

rtc: gamecube: Check the return value of ioremap()

2026-01-11 15:21:39 +01:00

s390

s390/dasd: Fix gendisk parent after copy pair swap

2026-01-11 15:21:55 +01:00

sbus

…

scsi

scsi: aic94xx: fix use-after-free in device removal path

2026-01-11 15:21:58 +01:00

sh

…

siox

…

slimbus

slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves

2025-12-07 06:18:51 +09:00

soc

soc: amlogic: canvas: fix device leak on lookup

2026-01-11 15:22:04 +01:00

soundwire

…

spi

spi: fsl-cpm: Check length parity before switching to 16 bit mode

2026-01-11 15:21:50 +01:00

spmi

…

ssb

…

staging

staging: fbtft: core: fix potential memory leak in fbtft_probe_common()

2026-01-11 15:21:29 +01:00

target

scsi: target: Reset t_task_cdb pointer in error case

2026-01-11 15:21:58 +01:00

tc

…

tee

…

thermal

…

thunderbolt

thunderbolt: Add support for Intel Wildcat Lake

2025-12-07 06:18:51 +09:00

tty

serial: sprd: Return -EPROBE_DEFER when uart clock is not ready

2026-01-11 15:21:53 +01:00

ufs

scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()

2026-01-11 15:21:22 +01:00

uio

uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe

2026-01-11 15:21:15 +01:00

usb

usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()

2026-01-11 15:21:57 +01:00

vdpa

vdpa/pds: use %pe for ERR_PTR() in event handler registration

2026-01-11 15:21:33 +01:00

vfio

iommufd: Don't overflow during division for dirty tracking

2025-11-24 10:30:10 +01:00

vhost

vhost/vsock: improve RCU read sections around vhost_vsock_get()

2026-01-11 15:21:54 +01:00

video

fbdev: tcx.c fix mem_map to correct smem_start offset

2026-01-11 15:22:14 +01:00

virt

…

virtio

virtio_vdpa: fix misleading return in void function

2026-01-11 15:21:32 +01:00

vlynq

…

w1

…

watchdog

via_wdt: fix critical boot hang due to unnamed resource allocation

2026-01-11 15:21:52 +01:00

xen

…

zorro

…

Kconfig

…

Makefile

…