7.8

CVE-2026-89870

media: zoran: Avoid freeing a registered video_device twice

In the Linux kernel, the following vulnerability has been resolved:

media: zoran: Avoid freeing a registered video_device twice

zoran_init_video_device() installs zoran_vdev_release() as the
video_device release callback through zoran_template. After
video_register_device() succeeds, video_unregister_device() drops the
registered video_device reference and the V4L2 core eventually invokes
that release callback, which kfree()s the video_device.

zoran_exit_video_devices() called video_unregister_device() and then
kfree(zr->video_dev), so device teardown could free the same
video_device twice.

Remove the direct kfree() and clear the cached pointer after
unregistering. The pre-registration failure path keeps its manual free
because the video_device was not registered there.

This issue was found by a static analysis checker and confirmed by
manual source review.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 82e3a496eb56da0b9f29fdc5b63cedb3289e91de
Version < 3ad6cf27505017a6794f5f96c31218c2291e951b
Status affected
Version 82e3a496eb56da0b9f29fdc5b63cedb3289e91de
Version < c4acac8cdc005b2d14b6cef5e215d264212857f3
Status affected
Version 82e3a496eb56da0b9f29fdc5b63cedb3289e91de
Version < 4d99d8d0d895489064783601a516bd45812fa992
Status affected
Version 82e3a496eb56da0b9f29fdc5b63cedb3289e91de
Version < f1c4f3885df1f09bcab5296d86834d104f865e86
Status affected
Version 82e3a496eb56da0b9f29fdc5b63cedb3289e91de
Version < 672dbccf4351370dad002d3c78dbb29ca1588f22
Status affected
Version 82e3a496eb56da0b9f29fdc5b63cedb3289e91de
Version < 0735e0b5a96761a9ce277a238e834008ad92a0a5
Status affected
Version bd01629315ffd5b63da91d0bd529a77d30e55028
Status affected
Version ff3357bffd9fb78f59762d8955afc7382a279079
Status affected
Version c1ba65100a359fe28cfe37e09e10c99f247cbf1e
Status affected
Version 1e501ec38796f43e995731d1bcd4173cb1ccfce0
Status affected
Version 5.10.110
Version < 5.11
Status affected
Version 5.15.33
Version < 5.16
Status affected
Version 5.16.19
Version < 5.17
Status affected
Version 5.17.2
Version < 5.18
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.18
Status affected
Version 0
Version < 5.18
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/3ad6cf27505017a6794f5f96c31218c2291e951b
https://git.kernel.org/stable/c/c4acac8cdc005b2d14b6cef5e215d264212857f3
https://git.kernel.org/stable/c/4d99d8d0d895489064783601a516bd45812fa992
https://git.kernel.org/stable/c/f1c4f3885df1f09bcab5296d86834d104f865e86
https://git.kernel.org/stable/c/672dbccf4351370dad002d3c78dbb29ca1588f22
https://git.kernel.org/stable/c/0735e0b5a96761a9ce277a238e834008ad92a0a5