CVE-2026-89874

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the v4l2 async match notify() function where ancillary media links are created before the asc->asc subdev entry is added to the sd->asc list. If the creation of these ancillary links fails, the process jumps to err call unbind while the asc subdev entry remains unlinked. Because async connections are zero-allocated, the list entry contains NULL pointers for next and prev. Consequently, calling the list del() function on this entry can lead to a NULL pointer dereference, which overrides the original link creation error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.