CVE-2026-89901
kernel: media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 16, 2026
Updated · October 22, 2026
Description
A flaw was found in the Linux kernel's airspy media driver. When a streaming user disconnects and then closes the device, the airspy_stop_streaming() function attempts to access a USB device structure that has already been cleared. This leads to a NULL dereference, which can result in a system crash and a denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference