Memory Management Flaw in Linux Kernel Affecting Device Registration

CVE-2026-89741

What is CVE-2026-89741?

A memory management vulnerability exists in the Linux kernel regarding device registration in the V4L2 framework. The issue arises from the recently reverted patch intended to enhance error handling during device registration. When the device_register function fails, it requires a corresponding release of resources, which leads to a double-free scenario if both put_device and video_device_release are executed. The current solution opts for a reversion of the patch to prevent potential double-free errors, resulting in a minor memory leak instead. This decision simplifies the handling of failures in video_register_device without necessitating extensive changes to existing V4L2 drivers.

References