CVE-2026-43312
EUVD-2026-2858208.05.2026, 14:16
In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Initialize subdev before controls In ov5647_init_controls() we call v4l2_get_subdevdata, but it is initialized by v4l2_i2c_subdev_init() in the probe, which currently happens after init_controls(). This can result in a segfault if the error condition is hit, and we try to access i2c_client, so fix the order.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 5.12 ≤ 𝑥 < 5.15.202 |
| linux | linux_kernel | 5.16 ≤ 𝑥 < 6.1.165 |
| linux | linux_kernel | 6.2 ≤ 𝑥 < 6.6.128 |
| linux | linux_kernel | 6.7 ≤ 𝑥 < 6.12.75 |
| linux | linux_kernel | 6.13 ≤ 𝑥 < 6.18.16 |
| linux | linux_kernel | 6.19 ≤ 𝑥 < 6.19.6 |
𝑥
= Vulnerable software versions
Debian Releases
Vulnerability Media Exposure
References