---
id: CVE-2026-93223
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  staging: media: tegra-video: fix of_node_put() on VIP parse errors

  tegra_vip_channel_of_parse() initializes np from dev->of_node without
  taking a reference, but its er…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  staging: media: tegra-video: fix of_node_put() on VIP parse errors

  tegra_vip_channel_of_parse() initializes np from dev->of_node without
  taking a reference, but its er…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e740d199cf0ff1e53ddc2ab067c0a09b55845d68 <
    a3783800c9475fa58b8db0885893f96a23f949da
  - >-
    Linux >= e740d199cf0ff1e53ddc2ab067c0a09b55845d68 <
    1295ba29ac590bbb5c4a586afd408018168af10b
  - >-
    Linux >= e740d199cf0ff1e53ddc2ab067c0a09b55845d68 <
    656d047dc0c29c0964d840217a0593f16aa9bc5e
  - >-
    Linux >= e740d199cf0ff1e53ddc2ab067c0a09b55845d68 <
    fc9937019cf7e2fe4e29f9341e6400bcd2cde721
  - >-
    Linux >= e740d199cf0ff1e53ddc2ab067c0a09b55845d68 <
    7393372f79db940acff206b43e2905685a0c57ad
  - Linux 6.5
published: '2026-09-24'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T16:17:17.590'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93223'
references:
  - url: 'https://git.kernel.org/stable/c/1295ba29ac590bbb5c4a586afd408018168af10b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/656d047dc0c29c0964d840217a0593f16aa9bc5e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7393372f79db940acff206b43e2905685a0c57ad'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a3783800c9475fa58b8db0885893f96a23f949da'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fc9937019cf7e2fe4e29f9341e6400bcd2cde721'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-24T15:45:56.667Z'
epss: 0.00168
epssPercentile: 0.0536
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

staging: media: tegra-video: fix of_node_put() on VIP parse errors

tegra_vip_channel_of_parse() initializes np from dev->of_node without
taking a reference, but its error paths drop one through the
err_node_put label. This underflows the refcount of the VIP device's
OF node when endpoint parsing fails on a malformed device tree.

The only reference the function takes on np is the success-path
of_node_get() stored in vip->chan.of_node, and that one is already
released by the tegra_vip_init() error path and by tegra_vip_exit().

Return errors directly instead of jumping to the bogus cleanup label.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.