Linux Kernel Vulnerability in Media Control for OV5647 Camera Driver

CVE-2026-46239

What is CVE-2026-46239?

A vulnerability in the Linux kernel's media control implementation for the OV5647 camera driver can lead to runtime power management reference count leaks. This occurs due to the improper handling of three control cases, specifically AUTOGAIN, EXPOSURE_AUTO, and ANALOGUE_GAIN, which currently return without executing the necessary pm_runtime_put() function. To address this, the implementation must be updated to use a 'ret = ... break' pattern, ensuring that pm_runtime_put() is always invoked before exiting the function. This correction helps maintain the integrity of runtime power management and prevents unnecessary resource consumption.

References