CVE-2026-68205

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the v4l2-fwnode component where the helper function v4l2 async register subdev sensor() incorrectly overwrites the subdevice owner. This occurs because the function calls a macro that resolves THIS MODULE to the v4l2-fwnode module or NULL (if built-in) instead of the actual sensor driver module. Consequently, the sensor module's reference count is not incremented during asynchronous registration, allowing the module to be removed while the subdevice is still being used by a notifier, such as a CSI-2 receiver bridge driver.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.