CVE-2026-89887

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A teardown order bug exists in the ov7740 remove() function. The driver destroys the mutex before freeing the V4L2 control handler that depends on it, which can cause a use-after-destroy kernel panic. Additionally, the driver calls v4l2 ctrl handler free() and mutex destroy() sequentially and then calls ov7740 free controls(), which invokes both functions again, leading to a double-free. A double-free occurs when the system attempts to free the same memory location twice, potentially causing crashes or memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.