CVE-2026-93101
Description
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: Unregister sub-device if asc_list is empty When my em28xx USB device that uses the i2c tvp5150 driver is disconnected, it crashes. The cause is that the tvp5150 i2c module uses v4l2_async, but the em28xx driver does not since it predates v4l2_async. In that corner case sd->asc_list is empty, so v4l2_async_unregister_subdev() never calls v4l2_device_unregister_subdev(). Modify the code so that, if sd->asc_list is empty, v4l2_device_unregister_subdev() is still called.
How to fix
- Linux Linuxc7201bd08cad791858337e33ffcd90d8ae4147c2, e190320cebe921f99973c984ac53f317061a011f, 65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32, 9fb74dce5c650cb23b60f6ba0ffcd5024e948a75, 4e72f13d58c4245c177a9d5f54579345554f354d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 28a1295795d85a25f2e7dd391c43969e95fcb341 ≤ v < c7201bd08cad791858337e33ffcd90d8ae4147c2, 28a1295795d85a25f2e7dd391c43969e95fcb341 ≤ v < e190320cebe921f99973c984ac53f317061a011f, 28a1295795d85a25f2e7dd391c43969e95fcb341 ≤ v < 65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32, 28a1295795d85a25f2e7dd391c43969e95fcb341 ≤ v < 9fb74dce5c650cb23b60f6ba0ffcd5024e948a75, 28a1295795d85a25f2e7dd391c43969e95fcb341 ≤ v < 4e72f13d58c4245c177a9d5f54579345554f354d, 6.6 | c7201bd08cad791858337e33ffcd90d8ae4147c2, e190320cebe921f99973c984ac53f317061a011f, 65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32, 9fb74dce5c650cb23b60f6ba0ffcd5024e948a75, 4e72f13d58c4245c177a9d5f54579345554f354d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.