CVE-2026-43189

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the v4l2-async component of the media subsystem regarding error handling after a match is found with an fwnode. Specifically, if the v4l2 async match notify() function fails before sub-notifier handling, the async connection is unbound and its entry is removed from the sub-device's async connection list, a process that is redundantly performed within v4l2 async match notify(). Additionally, the sd field of the async connection is only assigned after ancillary links are created in v4l2 async match notify(), yet it is dereferenced in v4l2 async unbind subdev one() when called during the error path of a v4l2 async match notify() failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.