Live › vulnerability › CVE-2026-98915
Go to dashboardThe video-i2c media driver in the Linux kernel unregistered its video device with the plain removal call instead of the vb2 variant, so the vb2 queue was not disconnected first on driver removal. The sources do not describe an attacker-reachable impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel that includes the video-i2c media driver, typically those with I2C-attached video sensors. The sources do not say which kernel versions are affected or whether any exploitable path exists.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
media: video-i2c: use vb2_video_unregister_device on driver removal
The driver uses vb2_fop_release() as its file release operation, so vb2_video_unregister_device() should be used instead of video_unregister_device() during driver removal.
This ensures that the vb2 queue is properly disconnected before the video device is unregistered.
This page as .md · .json · in your agent: get_signal("CVE-2026-98915")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.