{"id":"CVE-2026-98915","kind":"vulnerability","aliases":["CVE-2026-98915"],"related":[],"title":"Linux kernel: video-i2c driver removal skips proper vb2 queue disconnect","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: video-i2c: use vb2_video_unregister_device on driver removal\n\nThe driver uses vb2_fop_release() as its file release operation, so\nvb2_video_unregister_device() should be used instead of\nvideo_unregister_device() during driver removal.\n\nThis ensures that the vb2 queue is properly disconnected before the\nvideo device is unregistered.","summary":"The video-i2c media driver in the Linux kernel unregistered its video device with the plain removal call instead of the vb2 variant, so the vb2 queue was not disconnected first on driver removal. The sources do not describe an attacker-reachable impact.","severity":"unknown","cvss":null,"epss":0.00209,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","linux-kernel","media-drivers"],"not_affected_if":["no-video-i2c-hardware"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-23T12:18:25+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T04:58:27+00:00","updated_at":"2026-10-25T12:38:50+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T04:58:27Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel: video-i2c driver removal skips proper vb2 queue disconnect","impact":"low","summary":"The video-i2c media driver in the Linux kernel unregistered its video device with the plain removal call instead of the vb2 variant, so the vb2 queue was not disconnected first on driver removal. The sources do not describe an attacker-reachable impact.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","media-drivers"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"Check the NVD entry and the upstream kernel commit for affected versions, the fixed stable releases, and whether the bug causes a crash or any security-relevant effect.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-video-i2c-hardware"],"who_is_affected":"Systems running a Linux kernel that includes the video-i2c media driver, typically those with I2C-attached video sensors. The sources do not say which kernel versions are affected or whether any exploitable path exists.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00055,"input_tokens":3340,"output_tokens":432,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-98915':15A,18A 'attack':68B 'attacker-reach':67B 'call':44B 'cve':13A,16A 'describ':65B 'devic':39B,89C,108C,116C,132C 'disconnect':12A,56B,128C 'driver':6A,25B,31B,59B,91C,94C,118C 'ensur':121C 'file':101C 'first':57B 'follow':76C 'fop':97C 'i2c':5A,29B,84C 'impact':70B 'infrastructur':19B 'instead':45B,112C 'kernel':2A,22B,35B,74C 'linux':1A,21B,34B,73C 'linux-kernel':20B 'media':24B,30B,81C 'media-driv':23B 'oper':103C 'plain':42B 'proper':9A,127C 'queue':11A,53B,125C 'reachabl':69B 'releas':98C,102C 'remov':7A,43B,60B,92C,119C 'resolv':80C 'skip':8A 'sourc':62B 'unregist':36B,88C,107C,115C,134C 'use':85C,95C,111C 'variant':49B 'vb2':10A,48B,52B,86C,96C,105C,124C 'video':4A,28B,38B,83C,87C,106C,114C,131C 'video-i2c':3A,27B,82C 'vulner':77C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel that includes the video-i2c media driver, typically those with I2C-attached video sensors. The sources do not say which kernel versions are affected or whether any exploitable path exists.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T12:18:25+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98915","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98915","severity":null,"published_at":"2026-10-23T12:18:25+00:00","modified_at":"2026-10-23T12:18:25+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-98915","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98915","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:50+00:00","fetched_at":"2026-10-25T12:38:50+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}