CVE-2026-80650

A flaw was found in the Linux kernel's media: atomisp: gc2235 module. This vulnerability arises from incorrect error handling during the module's initialization process. Specifically, a use-after-free (UAF) condition can occur, where the system attempts to use memory that has already been released, potentially allowing a local attacker to gain elevated privileges or cause the system to crash. Additionally, a memory leak can occur, consuming system resources and leading to a denial of service.

A moderate-impact use-after-free flaw was found in the Linux kernel's atomisp gc2235 camera sensor driver. The gc2235_probe() function mishandles its error paths: when media_entity_pads_init() fails, gc2235_remove() is invoked, which tears down the subdevice and frees the device structure, but probe execution still falls through to atomisp_register_i2c_module(), resulting in a use-after-free; other probe failure paths can leave the media entity and control handler initialized while leaking the device structure's memory. A local attacker able to trigger these probe error paths could use this flaw to crash the system (denial of service) or, in the worst case, gain elevated privileges. Red Hat rates this flaw as moderate impact (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). All Red Hat Enterprise Linux (kernel and kernel-rt) and Red Hat In-Vehicle OS kernel products are listed as not affected because the vulnerable code is not present in the shipped kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.