CVE-2026-89886
kernel: media: intel/ipu6: fix async notifier cleanup leak on parse error
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 16, 2026
Updated · September 30, 2026
Description
A flaw was found in the Intel IPU6 media driver within the Linux kernel. This vulnerability occurs when the driver fails to properly clean up resources during an error in processing device connections. An attacker could potentially exploit this by triggering a specific error condition, leading to a resource leak. This continuous resource depletion could ultimately result in a Denial of Service (DoS), making the system unresponsive or unstable.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime