CVE-2026-89892

CVE-2026-89892 is a use-after-free in the Linux kernel's em28xx media driver. On dual-TS boards , the audio-only path registers extensions during primary device probing, before the secondary device (dev_next) is created. The duplicate device inherits is_audio_only and is independently inserted in...

EUVD-2026-80492

In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers extensions while probing the primary device. For a dual-TS board, this happens before devnext is created. The duplicate device inherits...