CVE-2026-89886

A flaw was found in the Intel IPU6 media driver within the Linux kernel. This vulnerability occurs when the driver fails to properly clean up resources during an error in processing device connections. An attacker could potentially exploit this by triggering a specific error condition, leading to...

Linux Distros Unpatched Vulnerability : CVE-2026-93070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ipu6: Do not free aux device pdata after init ipu6businitializedevice stores the isys/psys pdata pointer in struct ipu6busdevice and initializes the...

DEBIAN-CVE-2026-93070

In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Do not free aux device pdata after init ipu6businitializedevice stores the isys/psys pdata pointer in struct ipu6busdevice and initializes the auxiliary device. After that point, error unwinding must drop the auxilia...

CVE-2026-93070

In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Do not free aux device pdata after init ipu6businitializedevice stores the isys/psys pdata pointer in struct ipu6busdevice and initializes the auxiliary device. After that point, error unwinding must drop the auxilia...

CVE-2026-93070 media: ipu6: Do not free aux device pdata after init

In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Do not free aux device pdata after init ipu6businitializedevice stores the isys/psys pdata pointer in struct ipu6busdevice and initializes the auxiliary device. After that point, error unwinding must drop the auxilia...

CVE-2026-93070

CVE-2026-93070 is a double-free vulnerability in the Linux kernel's Intel IPU6 media driver (media: ipu6). After ipu6_bus_initialize_device() stores the isys/psys pdata pointer and initializes the auxiliary device, error-unwinding paths in the callers perform an extra kfree(pdata). Since the auxi...

CVE-2026-93070 media: ipu6: Do not free aux device pdata after init

In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Do not free aux device pdata after init ipu6businitializedevice stores the isys/psys pdata pointer in struct ipu6busdevice and initializes the auxiliary device. After that point, error unwinding must drop the auxilia...

EUVD-2026-82180

In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Do not free aux device pdata after init ipu6businitializedevice stores the isys/psys pdata pointer in struct ipu6busdevice and initializes the auxiliary device. After that point, error unwinding must drop the auxilia...

CVE-2026-89886

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isysnotifierinit calls v4l2asyncnfinit and then adds fwnode remote subdevs in a loop with v4l2asyncnfaddfwnoderemote. If an endpoint parse or add fails partway...

DEBIAN-CVE-2026-89886

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isysnotifierinit calls v4l2asyncnfinit and then adds fwnode remote subdevs in a loop with v4l2asyncnfaddfwnoderemote. If an endpoint parse or add fails partway...

CVE-2026-89886 media: intel/ipu6: fix async notifier cleanup leak on parse error

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isysnotifierinit calls v4l2asyncnfinit and then adds fwnode remote subdevs in a loop with v4l2asyncnfaddfwnoderemote. If an endpoint parse or add fails partway...

CVE-2026-89886

CVE-2026-89886 affects the Linux kernel intel/ipu6 media driver. In isys_notifier_init() , after calling v4l2_async_nf_init() and beginning to add fwnode remote subdevs via v4l2_async_nf_add_fwnode_remote(), an endpoint parse or add failure mid-loop jumps to err_parse and returns without calling ...

EUVD-2026-80486

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isysnotifierinit calls v4l2asyncnfinit and then adds fwnode remote subdevs in a loop with v4l2asyncnfaddfwnoderemote. If an endpoint parse or add fails partway...

CVE-2026-89886 media: intel/ipu6: fix async notifier cleanup leak on parse error

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isysnotifierinit calls v4l2asyncnfinit and then adds fwnode remote subdevs in a loop with v4l2asyncnfaddfwnoderemote. If an endpoint parse or add fails partway...

Linux Distros Unpatched Vulnerability : CVE-2026-89886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: intel/ipu6: fix async notifier cleanup leak on parse error isysnotifierinit calls v4l2asyncnfinit and then adds fwnode remote subdevs in a loop with...

The vulnerability of the ipu6pci_probe() function in the drivers/media/pci/intel/ipu6/ipu6.c file of the Linux kernel’s multimedia device driver module allows a attacker to cause a service failure.

The vulnerability of the ipu6pciprobe function in the drivers/media/pci/intel/ipu6/ipu6.c file of the Linux multimedia device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the driver/media/pci/intel/ipu6/ipu6.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/media/pci/intel/ipu6/ipu6.c component of the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: media: ipu6: Fixed a RPM reference leak in error handling paths for probe functions. Several error paths in ipu6pciprobe allowed code to directly jump to outipu6busdeldevices without releasing the runtime PM reference. We have...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path, it was confirmed that isp-psys is an error pointer that is not NULL. Therefore, this condition is true, and the error pointer is dereferenced. Thus, isp-psys shoul...

SUSE CVE-2026-46313

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix error pointer dereference In a error path isp-psys is confirmed to be an error pointer not NULL so this condition is true and the error pointer is dereferenced. So isp-psys should be set to NULL before goin...