media: em28xx: defer audio-only extension registration

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-89892
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-16 11:16:57 UTC
Updated2026-09-16 11:16:57 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers extensions while probing the primary device. For a dual-TS board, this happens before dev_next is created. The duplicate device inherits is_audio_only and is then independently inserted into em28xx_devlist. The list is intended to contain only primary devices: extension operations reach the secondary device through dev_next. The independently linked secondary can be freed during disconnect while its list node remains reachable, resulting in a use-after-free. Defer audio-only extension registration to the module-request work item. It runs only after probing has completed construction of the optional secondary device, so only the primary is registered and extension callbacks reach the secondary through dev_next.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 4a089668ef22c295ed4997289cc48446c849249c 0da1e627f4fc9d0e947fdae90913042120878923 git Not specified
CNA Linux Linux affected 4a089668ef22c295ed4997289cc48446c849249c f8d7e77d9c621b42a191c67a9b37bec23dc1d555 git Not specified
CNA Linux Linux affected 4a089668ef22c295ed4997289cc48446c849249c 1abe9524dec0fd26e9ceb8d586034d6f68dd8273 git Not specified
CNA Linux Linux affected 4a089668ef22c295ed4997289cc48446c849249c 4e11c45dfdc72ab656067b1df8fcebaf52fd4715 git Not specified
CNA Linux Linux affected 4a089668ef22c295ed4997289cc48446c849249c d06067ee32620f272cfb80c7bc7c572ad4e74724 git Not specified
CNA Linux Linux affected 4a089668ef22c295ed4997289cc48446c849249c f9322ac9f862961d7f377b87ec26c8565af7e073 git Not specified
CNA Linux Linux affected 4a089668ef22c295ed4997289cc48446c849249c 4666197ca4f7d80cd3b0292054fe45d76be9ba04 git Not specified
CNA Linux Linux affected 4a089668ef22c295ed4997289cc48446c849249c 95f76f51937fdfb0fc1e14cae606b1ef574a56f3 git Not specified
CNA Linux Linux affected 4.17 Not specified
CNA Linux Linux unaffected 4.17 semver Not specified
CNA Linux Linux unaffected 5.10.270 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.221 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.188 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.110 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.51 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.5 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3-rc1 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/1abe9524dec0fd26e9ceb8d586034d6f68dd8273 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/0da1e627f4fc9d0e947fdae90913042120878923 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/f9322ac9f862961d7f377b87ec26c8565af7e073 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/95f76f51937fdfb0fc1e14cae606b1ef574a56f3 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/4666197ca4f7d80cd3b0292054fe45d76be9ba04 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d06067ee32620f272cfb80c7bc7c572ad4e74724 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/4e11c45dfdc72ab656067b1df8fcebaf52fd4715 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/f8d7e77d9c621b42a191c67a9b37bec23dc1d555 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report