CVE-2026-93101

media: v4l2-async: Unregister sub-device if asc_list is empty

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-async: Unregister sub-device if asc_list is empty

When my em28xx USB device that uses the i2c tvp5150 driver is disconnected, it crashes.

The cause is that the tvp5150 i2c module uses v4l2_async, but the em28xx driver does not since it predates v4l2_async.

In that corner case sd->asc_list is empty, so v4l2_async_unregister_subdev() never calls v4l2_device_unregister_subdev().

Modify the code so that, if sd->asc_list is empty, v4l2_device_unregister_subdev() is still called.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	28a1295795d85a25f2e7dd391c43969e95fcb341 to before c7201bd08cad791858337e33ffcd90d8ae4147c2Affected 28a1295795d85a25f2e7dd391c43969e95fcb341 to before e190320cebe921f99973c984ac53f317061a011fAffected 28a1295795d85a25f2e7dd391c43969e95fcb341 to before 65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32Affected 28a1295795d85a25f2e7dd391c43969e95fcb341 to before 9fb74dce5c650cb23b60f6ba0ffcd5024e948a75Affected 28a1295795d85a25f2e7dd391c43969e95fcb341 to before 4e72f13d58c4245c177a9d5f54579345554f354dAffected
LinuxLinux	6.6Affected before 6.6Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

28a1295795d85a25f2e7dd391c43969e95fcb341 to before c7201bd08cad791858337e33ffcd90d8ae4147c2Affected
28a1295795d85a25f2e7dd391c43969e95fcb341 to before e190320cebe921f99973c984ac53f317061a011fAffected
28a1295795d85a25f2e7dd391c43969e95fcb341 to before 65e55f34fb2d61cb4f8a5dfcb93848af2aea0f32Affected
28a1295795d85a25f2e7dd391c43969e95fcb341 to before 9fb74dce5c650cb23b60f6ba0ffcd5024e948a75Affected
28a1295795d85a25f2e7dd391c43969e95fcb341 to before 4e72f13d58c4245c177a9d5f54579345554f354dAffected

LinuxLinux

6.6Affected
before 6.6Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.