CVE-2026-89522

A flaw was found in the Linux kernel's media subsystem, specifically within the ipu7 driver. When an error occurs during the device's initial setup (probe error path), a V4L2 asynchronous notifier is not correctly removed from a global list. This results in a use-after-free vulnerability, where the system attempts to access memory that has already been released. A local attacker could potentially exploit this to cause system instability or execute unauthorized code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.