CVE-2026-43246

media: i2c/tw9906: Fix potential memory leak in tw9906_probe()

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: i2c/tw9906: Fix potential memory leak in tw9906_probe()

In one of the error paths in tw9906_probe(), the memory allocated in v4l2_ctrl_handler_init() and v4l2_ctrl_new_std() is not freed. Fix that by calling v4l2_ctrl_handler_free() on the handler in that error path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a000e9a02b5885b1b69f691c80e346d102f94a88 to before e9a490937942f18205dac7b6b192975ef1369ae1Affected a000e9a02b5885b1b69f691c80e346d102f94a88 to before 9548a8bbf511a252a9848f96220c6b95c9a3b918Affected a000e9a02b5885b1b69f691c80e346d102f94a88 to before 0c33338514d8246280533a77091e6b6ee548c606Affected a000e9a02b5885b1b69f691c80e346d102f94a88 to before ccb92def042a3636ed47f25a30bd553788e5191eAffected a000e9a02b5885b1b69f691c80e346d102f94a88 to before fb09d8b80046216646f1a344410cfa9cfa6c6c7cAffected a000e9a02b5885b1b69f691c80e346d102f94a88 to before 377a7756914364d72550fc86ca0f404ef1d96141Affected a000e9a02b5885b1b69f691c80e346d102f94a88 to before 59420d5d9c46b084e21f9ea6ce79fc79ae9e414cAffected a000e9a02b5885b1b69f691c80e346d102f94a88 to before cad237b6c875fbee5d353a2b289e98d240d17ec8Affected
LinuxLinux	3.10Affected before 3.10Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

a000e9a02b5885b1b69f691c80e346d102f94a88 to before e9a490937942f18205dac7b6b192975ef1369ae1Affected
a000e9a02b5885b1b69f691c80e346d102f94a88 to before 9548a8bbf511a252a9848f96220c6b95c9a3b918Affected
a000e9a02b5885b1b69f691c80e346d102f94a88 to before 0c33338514d8246280533a77091e6b6ee548c606Affected
a000e9a02b5885b1b69f691c80e346d102f94a88 to before ccb92def042a3636ed47f25a30bd553788e5191eAffected
a000e9a02b5885b1b69f691c80e346d102f94a88 to before fb09d8b80046216646f1a344410cfa9cfa6c6c7cAffected
a000e9a02b5885b1b69f691c80e346d102f94a88 to before 377a7756914364d72550fc86ca0f404ef1d96141Affected
a000e9a02b5885b1b69f691c80e346d102f94a88 to before 59420d5d9c46b084e21f9ea6ce79fc79ae9e414cAffected
a000e9a02b5885b1b69f691c80e346d102f94a88 to before cad237b6c875fbee5d353a2b289e98d240d17ec8Affected

LinuxLinux

3.10Affected
before 3.10Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.