CVE-2026-68205

A flaw was found in the Linux kernel. The v4l2-fwnode module, responsible for video device node management, incorrectly handles module ownership during asynchronous subdevice registration. This can lead to a sensor module's reference count not being properly incremented. As a result, the module may be prematurely removed while still active, potentially causing system instability or a denial of service.

This issue affects V4L2 async sensor registration. v4l2_async_register_subdev_sensor() overwrites the subdev module owner set by the caller. Embedded camera platforms using v4l2-fwnode are affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.