CVE-2026-89870
Description
In the Linux kernel, the following vulnerability has been resolved: media: zoran: Avoid freeing a registered video_device twice zoran_init_video_device() installs zoran_vdev_release() as the video_device release callback through zoran_template. After video_register_device() succeeds, video_unregister_device() drops the registered video_device reference and the V4L2 core eventually invokes that release callback, which kfree()s the video_device. zoran_exit_video_devices() called video_unregister_device() and then kfree(zr->video_dev), so device teardown could free the same video_device twice. Remove the direct kfree() and clear the cached pointer after unregistering. The pre-registration failure path keeps its manual free because the video_device was not registered there. This issue was found by a static analysis checker and confirmed by manual source review.
How to fix
- Linux Linux29792762e65d4eefbe75b6048c59763fd844191a, 99277a387802eb6c1907c73f09d746908cc64913, 3ad6cf27505017a6794f5f96c31218c2291e951b, c4acac8cdc005b2d14b6cef5e215d264212857f3, 4d99d8d0d895489064783601a516bd45812fa992, f1c4f3885df1f09bcab5296d86834d104f865e86, 672dbccf4351370dad002d3c78dbb29ca1588f22, 0735e0b5a96761a9ce277a238e834008ad92a0a5, 5.10.273, 5.15.224, 5.17, 5.18 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | bd01629315ffd5b63da91d0bd529a77d30e55028 ≤ v < 29792762e65d4eefbe75b6048c59763fd844191a, ff3357bffd9fb78f59762d8955afc7382a279079 ≤ v < 99277a387802eb6c1907c73f09d746908cc64913, 82e3a496eb56da0b9f29fdc5b63cedb3289e91de ≤ v < 3ad6cf27505017a6794f5f96c31218c2291e951b, 82e3a496eb56da0b9f29fdc5b63cedb3289e91de ≤ v < c4acac8cdc005b2d14b6cef5e215d264212857f3, 82e3a496eb56da0b9f29fdc5b63cedb3289e91de ≤ v < 4d99d8d0d895489064783601a516bd45812fa992, 82e3a496eb56da0b9f29fdc5b63cedb3289e91de ≤ v < f1c4f3885df1f09bcab5296d86834d104f865e86, 82e3a496eb56da0b9f29fdc5b63cedb3289e91de ≤ v < 672dbccf4351370dad002d3c78dbb29ca1588f22, 82e3a496eb56da0b9f29fdc5b63cedb3289e91de ≤ v < 0735e0b5a96761a9ce277a238e834008ad92a0a5, c1ba65100a359fe28cfe37e09e10c99f247cbf1e, 1e501ec38796f43e995731d1bcd4173cb1ccfce0, 5.10.110 ≤ v < 5.10.273, 5.15.33 ≤ v < 5.15.224, 5.16.19 ≤ v < 5.17, 5.17.2 ≤ v < 5.18, 5.18 | 29792762e65d4eefbe75b6048c59763fd844191a, 99277a387802eb6c1907c73f09d746908cc64913, 3ad6cf27505017a6794f5f96c31218c2291e951b, c4acac8cdc005b2d14b6cef5e215d264212857f3, 4d99d8d0d895489064783601a516bd45812fa992, f1c4f3885df1f09bcab5296d86834d104f865e86, 672dbccf4351370dad002d3c78dbb29ca1588f22, 0735e0b5a96761a9ce277a238e834008ad92a0a5, 5.10.273, 5.15.224, 5.17, 5.18 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.