CVE-2026-43218

media: i2c/tw9903: Fix potential memory leak in tw9903_probe()

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: i2c/tw9903: Fix potential memory leak in tw9903_probe()

In one of the error paths in tw9903_probe(), the memory allocated in v4l2_ctrl_handler_init() and v4l2_ctrl_new_std() is not freed. Fix that by calling v4l2_ctrl_handler_free() on the handler in that error path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0890ec19c65def8c8e445931b026e0fa8d809a34 to before e54aa17c968c4de2c5f7b7ea390c63d33c07513bAffected 0890ec19c65def8c8e445931b026e0fa8d809a34 to before 32f0493506313775d3bd448de34762b6538da6bdAffected 0890ec19c65def8c8e445931b026e0fa8d809a34 to before 92537a15780b6d0281fd8286f93fbc3652e35f48Affected 0890ec19c65def8c8e445931b026e0fa8d809a34 to before 9cb9eca33d20316ed3c7a938793b8735ac3e128bAffected 0890ec19c65def8c8e445931b026e0fa8d809a34 to before a114918270f0d95c607d69b03a244e6afe54813fAffected 0890ec19c65def8c8e445931b026e0fa8d809a34 to before cc7aeed33e4f55c76f35f0fca73e4dfe12a63a3aAffected 0890ec19c65def8c8e445931b026e0fa8d809a34 to before add02a3fb1fd71b004f0ed824cbac00f850de558Affected 0890ec19c65def8c8e445931b026e0fa8d809a34 to before 9cea16fea47e5553f51d10957677ff735b1eff03Affected
LinuxLinux	3.10Affected before 3.10Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

0890ec19c65def8c8e445931b026e0fa8d809a34 to before e54aa17c968c4de2c5f7b7ea390c63d33c07513bAffected
0890ec19c65def8c8e445931b026e0fa8d809a34 to before 32f0493506313775d3bd448de34762b6538da6bdAffected
0890ec19c65def8c8e445931b026e0fa8d809a34 to before 92537a15780b6d0281fd8286f93fbc3652e35f48Affected
0890ec19c65def8c8e445931b026e0fa8d809a34 to before 9cb9eca33d20316ed3c7a938793b8735ac3e128bAffected
0890ec19c65def8c8e445931b026e0fa8d809a34 to before a114918270f0d95c607d69b03a244e6afe54813fAffected
0890ec19c65def8c8e445931b026e0fa8d809a34 to before cc7aeed33e4f55c76f35f0fca73e4dfe12a63a3aAffected
0890ec19c65def8c8e445931b026e0fa8d809a34 to before add02a3fb1fd71b004f0ed824cbac00f850de558Affected
0890ec19c65def8c8e445931b026e0fa8d809a34 to before 9cea16fea47e5553f51d10957677ff735b1eff03Affected

LinuxLinux

3.10Affected
before 3.10Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.