CVE-2026-89522

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the staging/ipu7 media component. The isys register devices() function registers the V4L2 async notifier using isys notifier init(). If a subsequent probe step, such as isys fw log init(), fails, the isys probe() function executes a cleanup path that calls isys unregister devices(). However, this helper fails to unregister or clean up the async notifier. Consequently, the notifier remains in the global notifier list while the ipu7 isys structure is freed, leading to list corruption and a use-after-free condition when the list is next accessed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.