« Volver al listado

CVE-2026-93101

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-async: Unregister sub-device if asc_list is empty

When my em28xx USB device that uses the i2c tvp5150 driver is disconnected, it crashes.

The cause is that the tvp5150 i2c module uses v4l2_async, but the em28xx driver does not since it predates v4l2_async.

In that corner case sd->asc_list is empty, so v4l2_async_unregister_subdev() never calls v4l2_device_unregister_subdev().

Modify the code so that, if sd->asc_list is empty, v4l2_device_unregister_subdev() is still called.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-93101",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "28a1295795d85a25f2e7dd391c43969e95fcb341",
              "lessThan": "c7201bd08cad791858337e33ffcd90d8ae4147c2",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "28a1295795d85a25f2e7dd391c43969e95fcb341",
              "lessThan": "e190320cebe921f99973c984ac53f317061a011f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "28a1295795d85a25f2e7dd391c43969e95fcb341",
              "lessThan": "65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "28a1295795d85a25f2e7dd391c43969e95fcb341",
              "lessThan": "9fb74dce5c650cb23b60f6ba0ffcd5024e948a75",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "28a1295795d85a25f2e7dd391c43969e95fcb341",
              "lessThan": "4e72f13d58c4245c177a9d5f54579345554f354d",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/media/v4l2-core/v4l2-async.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.6"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "6.6",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/media/v4l2-core/v4l2-async.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-17T17:18:04.357",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/4e72f13d58c4245c177a9d5f54579345554f354d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9fb74dce5c650cb23b60f6ba0ffcd5024e948a75",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c7201bd08cad791858337e33ffcd90d8ae4147c2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e190320cebe921f99973c984ac53f317061a011f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-async: Unregister sub-device if asc_list is empty\n\nWhen my em28xx USB device that uses the i2c tvp5150 driver is\ndisconnected, it crashes.\n\nThe cause is that the tvp5150 i2c module uses v4l2_async, but\nthe em28xx driver does not since it predates v4l2_async.\n\nIn that corner case sd->asc_list is empty, so\nv4l2_async_unregister_subdev() never calls v4l2_device_unregister_subdev().\n\nModify the code so that, if sd->asc_list is empty,\nv4l2_device_unregister_subdev() is still called."
    }
  ],
  "lastModified": "2026-09-17T17:18:04.357",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}