CVE-2026-93101

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-93101

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-93101

Downstream

Published

2026-09-17T16:11:13Z

Modified

2026-09-19T03:47:31Z

Summary

media: v4l2-async: Unregister sub-device if asc_list is empty

Details

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-async: Unregister sub-device if asc_list is empty

When my em28xx USB device that uses the i2c tvp5150 driver is disconnected, it crashes.

The cause is that the tvp5150 i2c module uses v4l2_async, but the em28xx driver does not since it predates v4l2_async.

In that corner case sd->asc_list is empty, so v4l2_async_unregister_subdev() never calls v4l2_device_unregister_subdev().

Modify the code so that, if sd->asc_list is empty, v4l2_device_unregister_subdev() is still called.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93101.json"
}

References

Affected packages

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

28a1295795d85a25f2e7dd391c43969e95fcb341

Fixed

c7201bd08cad791858337e33ffcd90d8ae4147c2

Fixed

e190320cebe921f99973c984ac53f317061a011f

Fixed

65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32

Fixed

9fb74dce5c650cb23b60f6ba0ffcd5024e948a75

Fixed

4e72f13d58c4245c177a9d5f54579345554f354d

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93101.json"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93101.json"