CVE-2026-89870

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue exists in the zoran media driver. The zoran init video device() function sets zoran vdev release() as the release callback. When video unregister device() is called, the V4L2 core eventually triggers this callback to free the video device. However, zoran exit video devices() also performs a direct kfree() on the video dev pointer after unregistering, leading to the same memory being freed twice during device teardown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.