CVE-2026-93223

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the tegra vip channel of parse() function where the np variable is initialized from dev->of node without taking a reference. When endpoint parsing fails due to a malformed device tree, the error paths incorrectly execute a reference drop via the err node put label. This leads to a refcount underflow of the VIP device's Open Firmware (OF) node, which is a counter used to track the number of references to a kernel object to manage its memory lifecycle.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.